Over 1 million tech questions and answers.

last week parinoid , this week infected

Q: last week parinoid , this week infected

well long stroy gonna try and shortengot friend request.......acceptedtalked on instant messenger for about 20 minutes , persons profil get's deleted as I watch and IM , dis connect block and delete contac and unplug internetrun malware bytes scan ........nothinggo to bed [this 2AM at 6AM get up restart computer and connect internetwindows no loner validdo clean install , reformat "C" drive only leave other 3 aloneafter re-install thousands of files 3-4 thousand listing all from programs to icons for rocket dock i "c:/users /admin/appdata/local/temp"also listings from other 3 HDD's....from last installafter I had deleted all partitions and reformated on 150gb Raptor OS is on......found this oddopened all hidden files found tons also in system volume fileboot active killdisk and dis connect all HDD's but 150gb raptor , run killdisk [does mil. spec. 1 pass zero write on HDD] then delete partition,reformat , and install OSwhile this going on watching dads computer on same routermy files start to appear therestart getting locked out of files on his ...................dis connect from net/localdo re format clean install on it....get back to it...but have not connected it back so back to mine here we are still hiden S.I.D numbers in one of 2 reycycle bin [actually 1 is the S.I.D file ,found by going into propertiys and adding me as permission......file changed before my eye's from trash can to S.I.D. #"s-1-5-21-xxxxxxxxxxxxxxxxxxxxxxxxx" [x's fill in numbers I don't remember] , but malware bytes forum said it was malware when googled full I.D.#also had to call in activation on both installs would not activate on line....haven't tried dads yetso ran malware bytessuper anti spy wareand avira scansall found somethingmostly tracking cookies for msn and downloads.com [where I got all virus/malware programs]and now here we are.....gonna upload logs you asked forneed to know if this sill inected....and how to re-install my other HDD's SAFELY , and clean them...............hopefully without losing info since one has 400gb of music and other 2 have 100's of movies that would be hard to replaceDDS.xtDDS (Ver_10-03-17.01) - NTFSx86 Run by Administrator at 15:51:14.45 on Tue 07/06/2010Internet Explorer: 7.0.6000.16982Microsoft? Windows Vista? Ultimate 6.0.6000.0.1252.1.1033.18.2046.1226 [GMT -5:00]AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}SP: AntiVir Desktop *enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\SLsvc.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Program Files\Avira\AntiVir Desktop\sched.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\system32\AEADISRV.EXEC:\Program Files\Avira\AntiVir Desktop\avguard.exeC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestrictedC:\Windows\system32\svchost.exe -k imgsvcC:\Program Files\Avira\AntiVir Desktop\avshadow.exeC:\Windows\System32\svchost.exe -k WerSvcGroupC:\Windows\system32\SearchIndexer.exeC:\Windows\system32\WUDFHost.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\Program Files\Analog Devices\SoundMAX\SoundTray.exeC:\Program Files\Avira\AntiVir Desktop\avgnt.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Users\Administrator\Desktop\dds.scrC:\Windows\system32\wbem\wmiprvse.exe============== Pseudo HJT Report ===============BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dllBHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.5.4723.1820\swg.dllTB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dlluRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRunuRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exemRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hidemRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exemRun: [SoundTray] c:\program files\analog devices\soundmax\SoundTray.exemRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /minIE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.htmlDPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cabDPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabSTS: Windows DreamScene: {e31004d1-a431-41b8-826f-e902f9d95c81} - %SystemRoot%\System32\DreamScene.dllmASetup: {7070D8E0-650A-46b3-B03C-9497582E6A74} - %SystemRoot%\system32\soundschemes.exe /AddRegistrationmASetup: {B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24} - %SystemRoot%\system32\soundschemes2.exe /AddRegistration============= SERVICES / DRIVERS ===============R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-7-6 135336]R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-7-6 267432]R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-7-6 60936]S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-6 135664]=============== Created Last 30 ================2010-07-06 20:46:15 0 ----a-w- c:\users\administrator\defogger_reenable2010-07-06 17:48:29 378368 ----a-w- c:\windows\system32\winhttp.dll2010-07-06 17:47:55 268800 ----a-w- c:\windows\system32\es.dll2010-07-06 17:47:06 1585664 ----a-w- c:\windows\system32\setupapi.dll2010-07-06 17:47:00 40960 ----a-w- c:\windows\system32\srclient.dll2010-07-06 17:47:00 371712 ----a-w- c:\windows\system32\srcore.dll2010-07-06 17:47:00 313856 ----a-w- c:\windows\system32\rstrui.exe2010-07-06 17:47:00 16384 ----a-w- c:\windows\system32\srdelayed.exe2010-07-06 16:29:55 0 d-----w- c:\programdata\Google2010-07-06 16:29:23 0 d-----w- c:\windows\system32\Adobe2010-07-06 16:09:51 494592 ----a-w- c:\windows\system32\kerberos.dll2010-07-06 16:09:51 272384 ----a-w- c:\windows\system32\schannel.dll2010-07-06 07:38:37 35669 ----a-w- c:\programdata\nvModes.dat2010-07-06 07:35:50 0 d-----w- c:\programdata\NVIDIA2010-07-06 07:12:46 34304 ----a-w- c:\windows\system32\atmlib.dll2010-07-06 07:12:46 289792 ----a-w- c:\windows\system32\atmfd.dll2010-07-06 07:12:46 24064 ----a-w- c:\windows\system32\lpk.dll2010-07-06 07:12:46 156672 ----a-w- c:\windows\system32\t2embed.dll2010-07-06 07:12:46 10240 ----a-w- c:\windows\system32\dciman32.dll2010-07-06 07:12:45 72704 ----a-w- c:\windows\system32\fontsub.dll2010-07-06 07:10:24 61440 ----a-w- c:\windows\system32\winipsec.dll2010-07-06 07:10:24 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL2010-07-06 07:10:24 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll2010-07-06 07:10:24 272896 ----a-w- c:\windows\system32\polstore.dll2010-07-06 07:08:24 95232 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll2010-07-06 07:08:24 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll2010-07-06 07:08:24 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll2010-07-06 07:07:33 87040 ----a-w- c:\windows\system32\msoert2.dll2010-07-06 07:07:33 39424 ----a-w- c:\windows\system32\ACCTRES.dll2010-07-06 07:07:33 205824 ----a-w- c:\windows\system32\msoeacct.dll2010-07-06 07:06:51 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE2010-07-06 07:06:51 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE2010-07-06 07:06:51 15360 ----a-w- c:\windows\system32\netevent.dll2010-07-06 07:06:51 11264 ----a-w- c:\windows\system32\MRINFO.EXE2010-07-06 07:06:51 103936 ----a-w- c:\windows\system32\netiohlp.dll2010-07-06 07:06:51 10240 ----a-w- c:\windows\system32\finger.exe2010-07-06 07:06:50 27136 ----a-w- c:\windows\system32\NETSTAT.EXE2010-07-06 07:06:50 19968 ----a-w- c:\windows\system32\ARP.EXE2010-07-06 07:06:50 17920 ----a-w- c:\windows\system32\ROUTE.EXE2010-07-06 07:06:00 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr2010-07-06 07:06:00 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll2010-07-06 07:05:59 258232 ----a-w- c:\windows\system32\drivers\acpi.sys2010-07-06 07:05:59 24064 ----a-w- c:\windows\system32\wtsapi32.dll2010-07-06 07:05:57 542720 ----a-w- c:\windows\system32\sysmain.dll2010-07-06 07:05:17 194560 ----a-w- c:\windows\system32\WebClnt.dll2010-07-06 07:05:17 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys2010-07-06 07:04:42 1657350 ----a-w- c:\windows\system32\wlan.tmf2010-07-06 07:04:42 12876 ----a-w- c:\windows\system32\wbem\wlan.mof2010-07-06 07:04:42 123904 ----a-w- c:\windows\system32\L2SecHC.dll2010-07-06 07:04:41 67584 ----a-w- c:\windows\system32\wlanhlp.dll2010-07-06 07:04:41 502272 ----a-w- c:\windows\system32\wlansvc.dll2010-07-06 07:04:41 47104 ----a-w- c:\windows\system32\wlanapi.dll2010-07-06 07:04:41 297984 ----a-w- c:\windows\system32\wlansec.dll2010-07-06 07:04:41 290816 ----a-w- c:\windows\system32\wlanmsm.dll2010-07-06 07:03:59 2048 ----a-w- c:\windows\system32\msxml3r.dll2010-07-06 07:03:59 1260032 ----a-w- c:\windows\system32\msxml3.dll2010-07-06 07:03:58 2048 ----a-w- c:\windows\system32\msxml6r.dll2010-07-06 07:03:58 1406464 ----a-w- c:\windows\system32\msxml6.dll2010-07-06 07:03:17 7680 ----a-w- c:\windows\system32\lsass.exe2010-07-06 07:03:17 72704 ----a-w- c:\windows\system32\secur32.dll2010-07-06 07:03:17 408136 ----a-w- c:\windows\system32\drivers\ksecdd.sys2010-07-06 07:03:17 216576 ----a-w- c:\windows\system32\msv1_0.dll2010-07-06 07:03:17 175104 ----a-w- c:\windows\system32\wdigest.dll2010-07-06 07:03:17 1233920 ----a-w- c:\windows\system32\lsasrv.dll2010-07-06 07:02:11 0 d-----w- c:\program files\NVIDIA Corporation2010-07-06 07:01:22 58368 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys2010-07-06 07:01:22 211968 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys2010-07-06 07:01:21 102400 ----a-w- c:\windows\system32\drivers\mrxsmb.sys2010-07-06 07:00:45 49664 ----a-w- c:\windows\system32\csrsrv.dll2010-07-06 07:00:45 376320 ----a-w- c:\windows\system32\winsrv.dll2010-07-06 07:00:10 98816 ----a-w- c:\windows\system32\mfps.dll2010-07-06 07:00:10 52736 ----a-w- c:\windows\system32\rrinstaller.exe2010-07-06 07:00:10 2855424 ----a-w- c:\windows\system32\mf.dll2010-07-06 07:00:10 2048 ----a-w- c:\windows\system32\mferror.dll2010-07-06 07:00:09 24576 ----a-w- c:\windows\system32\mfpmp.exe2010-07-06 06:59:29 3502480 ----a-w- c:\windows\system32\ntkrnlpa.exe2010-07-06 06:59:29 3468168 ----a-w- c:\windows\system32\ntoskrnl.exe2010-07-06 06:56:59 434176 ----a-w- c:\windows\system32\vbscript.dll2010-07-06 06:56:24 71680 ----a-w- c:\windows\system32\atl.dll2010-07-06 06:55:14 297472 ----a-w- c:\windows\system32\gdi32.dll2010-07-06 06:54:39 41984 ----a-w- c:\windows\system32\drivers\monitor.sys2010-07-06 06:54:39 1060920 ----a-w- c:\windows\system32\drivers\ntfs.sys2010-07-06 06:52:46 1152000 ----a-w- c:\windows\system32\themecpl.dll2010-07-06 06:52:45 233888 ----a-w- c:\windows\system32\DreamScene.dll2010-07-06 06:51:44 374456 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll2010-07-06 06:51:10 500736 ----a-w- c:\windows\system32\msdtcprx.dll2010-07-06 06:51:10 30208 ----a-w- c:\windows\system32\xolehlp.dll2010-07-06 06:50:35 156160 ----a-w- c:\windows\system32\wkssvc.dll2010-07-06 06:49:58 36352 ----a-w- c:\windows\system32\tsgqec.dll2010-07-06 06:49:58 1871872 ----a-w- c:\windows\system32\mstscax.dll2010-07-06 06:49:58 116736 ----a-w- c:\windows\system32\aaclient.dll2010-07-06 06:49:19 303616 ----a-w- c:\windows\system32\wmpeffects.dll2010-07-06 06:48:07 414208 ----a-w- c:\windows\system32\msscp.dll2010-07-06 06:47:33 713728 ----a-w- c:\windows\system32\timedate.cpl2010-07-06 06:46:54 356864 ----a-w- c:\windows\system32\MediaMetadataHandler.dll2010-07-06 06:46:17 86016 ----a-w- c:\windows\system32\icfupgd.dll2010-07-06 06:46:17 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys2010-07-06 06:46:17 396800 ----a-w- c:\windows\system32\MPSSVC.dll2010-07-06 06:46:17 392192 ----a-w- c:\windows\system32\FirewallAPI.dll2010-07-06 06:46:17 16896 ----a-w- c:\windows\system32\wfapigp.dll2010-07-06 06:46:16 61952 ----a-w- c:\windows\system32\cmifw.dll2010-07-06 06:43:47 80896 ----a-w- c:\windows\system32\MSNP.ax2010-07-06 06:43:47 68608 ----a-w- c:\windows\system32\Mpeg2Data.ax2010-07-06 06:43:47 428032 ----a-w- c:\windows\system32\EncDec.dll2010-07-06 06:43:47 292352 ----a-w- c:\windows\system32\psisdecd.dll2010-07-06 06:43:47 217088 ----a-w- c:\windows\system32\psisrndr.ax2010-07-06 06:43:47 177152 ----a-w- c:\windows\system32\mpg2splt.ax2010-07-06 06:43:47 1244672 ----a-w- c:\windows\system32\mcmde.dll2010-07-06 06:43:46 57856 ----a-w- c:\windows\system32\MSDvbNP.ax2010-07-06 06:42:02 2048 ----a-w- c:\windows\system32\tzres.dll2010-07-06 06:41:25 696832 ----a-w- c:\windows\system32\localspl.dll2010-07-06 06:40:21 45112 ----a-w- c:\windows\system32\drivers\pciidex.sys2010-07-06 06:40:21 21560 ----a-w- c:\windows\system32\drivers\atapi.sys2010-07-06 06:40:21 15928 ----a-w- c:\windows\system32\drivers\pciide.sys2010-07-06 06:40:21 109624 ----a-w- c:\windows\system32\drivers\ataport.sys2010-07-06 06:40:20 211000 ----a-w- c:\windows\system32\drivers\volsnap.sys2010-07-06 06:40:20 154624 ----a-w- c:\windows\system32\drivers\nwifi.sys2010-07-06 06:39:50 104448 ----a-w- c:\windows\system32\DWWIN.EXE2010-07-06 06:39:21 2923520 ----a-w- c:\windows\explorer.exe2010-07-06 06:39:06 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll2010-07-06 06:37:52 337408 ----a-w- c:\windows\system32\intl.cpl2010-07-06 06:37:52 25600 ----a-w- c:\windows\system32\LangCleanupSysprepAction.dll2010-07-06 06:37:52 23552 ----a-w- c:\windows\system32\lpremove.exe2010-07-06 06:37:52 166912 ----a-w- c:\windows\system32\lpksetup.exe2010-07-06 06:37:52 10240 ----a-w- c:\windows\system32\MUILanguageCleanup.dll2010-07-06 06:37:23 229888 ----a-w- c:\windows\system32\msshsq.dll2010-07-06 06:36:54 8704 ----a-w- c:\windows\system32\hccoin.dll2010-07-06 06:36:54 5888 ----a-w- c:\windows\system32\drivers\usbd.sys2010-07-06 06:36:54 192000 ----a-w- c:\windows\system32\drivers\usbhub.sys2010-07-06 06:36:53 8704 ----a-w- c:\windows\system32\hcrstco.dll2010-07-06 06:36:53 73216 ----a-w- c:\windows\system32\drivers\usbccgp.sys2010-07-06 06:36:53 38400 ----a-w- c:\windows\system32\drivers\usbehci.sys2010-07-06 06:36:53 224768 ----a-w- c:\windows\system32\drivers\usbport.sys2010-07-06 06:36:53 19456 ----a-w- c:\windows\system32\drivers\usbohci.sys2010-07-06 06:35:52 171520 ----a-w- c:\windows\system32\wintrust.dll2010-07-06 06:35:22 24064 ----a-w- c:\windows\system32\netcfg.exe2010-07-06 06:32:25 654336 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe2010-07-06 06:32:25 549888 ----a-w- c:\windows\system32\rpcss.dll2010-07-06 06:32:25 24576 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll2010-07-06 06:32:24 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll2010-07-06 06:32:24 501760 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll2010-07-06 06:32:24 247296 ----a-w- c:\windows\system32\wbem\WmiPrvSE.exe2010-07-06 06:32:24 130560 ----a-w- c:\windows\system32\wbem\WmiDcPrv.dll2010-07-06 06:32:23 97280 ----a-w- c:\windows\system32\iasrecst.dll2010-07-06 06:32:23 53248 ----a-w- c:\windows\system32\iasads.dll2010-07-06 06:32:23 37888 ----a-w- c:\windows\system32\iasdatastore.dll2010-07-06 06:32:23 158720 ----a-w- c:\windows\system32\sdohlp.dll2010-07-06 06:31:49 62464 ----a-w- c:\windows\system32\l3codeca.acm2010-07-06 06:31:49 220672 ----a-w- c:\windows\system32\l3codecp.acm2010-07-06 06:30:50 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys2010-07-06 06:30:50 213592 ----a-w- c:\windows\system32\drivers\netio.sys2010-07-06 06:30:50 179712 ----a-w- c:\windows\system32\iphlpsvc.dll2010-07-06 06:30:50 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS2010-07-06 06:30:49 815104 ----a-w- c:\windows\system32\drivers\tcpip.sys2010-07-06 06:30:49 22016 ----a-w- c:\windows\system32\netiougc.exe2010-07-06 06:30:49 167424 ----a-w- c:\windows\system32\tcpipcfg.dll2010-07-06 06:29:18 9728 ----a-w- c:\windows\system32\LAPRXY.DLL2010-07-06 06:29:18 223232 ----a-w- c:\windows\system32\WMASF.DLL2010-07-06 06:29:18 2048 ----a-w- c:\windows\system32\asferror.dll2010-07-06 06:29:07 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_NuidFltr_01005.Wdf2010-07-06 06:28:42 25600 ----a-w- c:\windows\system32\amxread.dll2010-07-06 06:28:42 14848 ----a-w- c:\windows\system32\apilogen.dll2010-07-06 06:28:10 566784 ----a-w- c:\windows\system32\SLCommDlg.dll2010-07-06 06:28:10 351232 ----a-w- c:\windows\system32\SLUI.exe2010-07-06 06:28:10 33280 ----a-w- c:\windows\system32\slwmi.dll2010-07-06 06:28:10 268288 ----a-w- c:\windows\system32\mcbuilder.exe2010-07-06 06:28:10 223232 ----a-w- c:\windows\system32\SLC.dll2010-07-06 06:28:09 57856 ----a-w- c:\windows\system32\SLUINotify.dll2010-07-06 06:28:09 39936 ----a-w- c:\windows\system32\slcinst.dll2010-07-06 06:28:09 2605568 ----a-w- c:\windows\system32\SLsvc.exe2010-07-06 06:28:09 186368 ----a-w- c:\windows\system32\SLLUA.exe2010-07-06 06:27:36 712192 ----a-w- c:\windows\system32\WindowsCodecs.dll2010-07-06 06:27:36 425472 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll2010-07-06 06:27:35 347136 ----a-w- c:\windows\system32\WindowsCodecsExt.dll2010-07-06 06:27:03 97792 ----a-w- c:\windows\system32\cabview.dll2010-07-06 06:25:24 320000 ----a-w- c:\windows\system32\drivers\csc.sys2010-07-06 06:25:24 105984 ----a-w- c:\windows\system32\CscMig.dll2010-07-06 06:25:21 61440 ----a-w- c:\windows\system32\ntprint.exe2010-07-06 06:25:21 220160 ----a-w- c:\windows\system32\ntprint.dll2010-07-06 06:25:20 1984512 ----a-w- c:\windows\system32\authui.dll2010-07-06 06:25:20 120320 ----a-w- c:\windows\system32\dhcpcsvc6.dll2010-07-06 06:25:20 10240 ----a-w- c:\windows\system32\dhcpcmonitor.dll2010-07-06 06:25:19 69632 ----a-w- c:\windows\system32\sendmail.dll2010-07-06 06:25:18 8138240 ----a-w- c:\windows\system32\ssBranded.scr2010-07-06 06:24:48 441856 ----a-w- c:\windows\system32\win32spl.dll2010-07-06 06:24:48 37376 ----a-w- c:\windows\system32\printcom.dll2010-07-06 06:24:24 2031104 ----a-w- c:\windows\system32\win32k.sys2010-07-06 06:22:50 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys2010-07-06 06:22:49 14848 ----a-w- c:\windows\system32\wshrm.dll2010-07-06 06:22:22 43520 ----a-w- c:\windows\system32\msdxm.tlb2010-07-06 06:22:22 313344 ----a-w- c:\windows\system32\wmpdxm.dll2010-07-06 06:22:22 18432 ----a-w- c:\windows\system32\amcompat.tlb2010-07-06 06:21:48 435712 ----a-w- c:\windows\system32\RMActivate_ssp.exe2010-07-06 06:21:48 431104 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe2010-07-06 06:21:48 312320 ----a-w- c:\windows\system32\msdrm.dll2010-07-06 06:21:48 154624 ----a-w- c:\windows\system32\secproc_ssp_isv.dll2010-07-06 06:21:48 154112 ----a-w- c:\windows\system32\secproc_ssp.dll2010-07-06 06:21:47 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe2010-07-06 06:21:47 515584 ----a-w- c:\windows\system32\RMActivate.exe2010-07-06 06:21:47 473088 ----a-w- c:\windows\system32\secproc_isv.dll2010-07-06 06:21:47 472576 ----a-w- c:\windows\system32\secproc.dll2010-07-06 06:21:20 11776 ----a-w- c:\windows\system32\sbunattend.exe2010-07-06 06:20:31 83968 ----a-w- c:\windows\system32\dnsrslvr.dll2010-07-06 06:20:31 24576 ----a-w- c:\windows\system32\dnscacheugc.exe2010-07-06 06:20:09 53760 ----a-w- c:\windows\system32\drivers\hdaudbus.sys2010-07-06 06:17:58 97800 ----a-w- c:\windows\system32\infocardapi.dll2010-07-06 06:17:58 622080 ----a-w- c:\windows\system32\icardagt.exe2010-07-06 06:17:58 11264 ----a-w- c:\windows\system32\icardres.dll2010-07-06 06:17:57 37384 ----a-w- c:\windows\system32\infocardcpl.cpl2010-07-06 06:17:55 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll2010-07-06 06:17:54 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll2010-07-06 06:17:54 43544 ----a-w- c:\windows\system32\PresentationHostProxy.dll2010-07-06 06:17:54 326160 ----a-w- c:\windows\system32\PresentationHost.exe2010-07-06 06:14:37 65536 ----a-w- c:\windows\ocsetup_cbs_install_NetFx3.dpx2010-07-06 06:14:37 35586048 ----a-w- c:\windows\ocsetup_install_NetFx3.etl2010-07-06 06:14:37 196608 ----a-w- c:\windows\ocsetup_cbs_install_NetFx3.perf2010-07-06 06:13:18 96760 ----a-w- c:\windows\system32\dfshim.dll2010-07-06 06:13:18 41984 ----a-w- c:\windows\system32\netfxperf.dll2010-07-06 06:13:17 282112 ----a-w- c:\windows\system32\mscoree.dll2010-07-06 06:13:16 83968 ----a-w- c:\windows\system32\mscories.dll2010-07-06 06:13:16 158720 ----a-w- c:\windows\system32\mscorier.dll2010-07-06 06:09:54 28672 ----a-w- c:\windows\system32\Apphlpdm.dll2010-07-06 06:09:53 4247552 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll2010-07-06 06:09:53 1686528 ----a-w- c:\windows\system32\gameux.dll2010-07-06 06:09:40 996352 ----a-w- c:\windows\system32\WMNetMgr.dll2010-07-06 06:09:40 94720 ----a-w- c:\windows\system32\logagent.exe2010-07-06 06:09:23 84480 ----a-w- c:\windows\system32\INETRES.dll2010-07-06 06:09:23 737792 ----a-w- c:\windows\system32\inetcomm.dll2010-07-06 06:09:16 60928 ----a-w- c:\windows\system32\msasn1.dll2010-07-06 06:09:10 1645568 ----a-w- c:\windows\system32\connect.dll2010-07-06 06:09:03 5120 ----a-w- c:\windows\system32\wmi.dll2010-07-06 06:09:03 152576 ----a-w- c:\windows\system32\imagehlp.dll2010-07-06 06:09:03 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys2010-07-06 06:08:51 788992 ----a-w- c:\windows\system32\rpcrt4.dll2010-07-06 06:08:41 396800 ----a-w- c:\windows\system32\drivers\http.sys2010-07-06 06:08:41 31232 ----a-w- c:\windows\system32\httpapi.dll2010-07-06 06:08:41 24064 ----a-w- c:\windows\system32\nshhttp.dll2010-07-06 06:08:08 130048 ----a-w- c:\windows\system32\drivers\srv2.sys2010-07-06 06:08:04 974336 ----a-w- c:\windows\system32\crypt32.dll2010-07-06 06:08:01 274432 ----a-w- c:\windows\system32\raschap.dll2010-07-06 06:08:00 232960 ----a-w- c:\windows\system32\rastls.dll2010-07-06 05:37:32 0 d-----w- c:\users\admini~1\appdata\roaming\Avira2010-07-06 05:26:29 2421760 ----a-w- c:\windows\system32\wucltux.dll2010-07-06 05:26:12 87552 ----a-w- c:\windows\system32\wudriver.dll2010-07-06 05:26:00 171608 ----a-w- c:\windows\system32\wuwebv.dll2010-07-06 05:25:59 33792 ----a-w- c:\windows\system32\wuapp.exe2010-07-06 05:19:37 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys2010-07-06 05:19:35 0 d-----w- c:\programdata\Avira2010-07-06 05:19:35 0 d-----w- c:\program files\Avira2010-07-06 05:17:42 0 d-sh--w- c:\windows\Installer2010-07-06 04:57:18 0 d-----w- c:\windows\Panther2010-07-06 04:57:04 8192 --s-a-r- C:\BOOTSECT.BAK2010-07-06 04:57:03 443912 --sha-r- C:\bootmgr2010-07-06 04:57:03 0 d-sh--w- C:\Boot2010-07-06 04:56:46 0 d-----w- C:\OEMLOGO2010-07-06 04:46:26 0 d-----w- c:\users\admini~1\appdata\roaming\SUPERAntiSpyware.com2010-07-06 04:46:26 0 d-----w- c:\programdata\SUPERAntiSpyware.com2010-07-06 04:46:21 0 d-----w- c:\program files\SUPERAntiSpyware2010-07-06 04:11:52 0 d-----w- c:\users\admini~1\appdata\roaming\Malwarebytes2010-07-06 04:11:43 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys2010-07-06 04:11:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys2010-07-06 04:11:42 0 d-----w- c:\programdata\Malwarebytes2010-07-06 04:11:42 0 d-----w- c:\program files\Malwarebytes' Anti-Malware2010-07-06 04:06:05 409600 ----a-w- c:\windows\system32\wrap_oal.dll2010-07-06 04:06:05 1495040 ------w- c:\windows\system32\adi_oal.dll2010-07-06 04:06:05 114688 ----a-w- c:\windows\system32\OpenAL32.dll2010-07-06 04:06:05 0 d-----w- c:\program files\Creative2010-07-06 04:05:47 0 d-----w- c:\programdata\SonicFocus2010-07-06 04:05:34 0 d-----w- c:\program files\Analog Devices2010-07-06 04:04:48 8535 ----a-r- c:\windows\system32\nvide.nvu2010-07-06 04:03:59 756054 ----a-r- c:\windows\system32\Alert.bmp2010-07-06 04:03:53 23936 ----a-w- c:\windows\Ascd_tmp.ini2010-07-06 04:03:51 10288 ----a-w- c:\windows\system32\drivers\ASUSHWIO.SYS==================== Find3M ====================2010-07-06 18:07:51 51200 ----a-w- c:\windows\inf\infpub.dat2010-07-06 18:07:39 86016 ----a-w- c:\windows\inf\infstrng.dat2010-07-06 18:07:39 86016 ----a-w- c:\windows\inf\infstor.dat2010-07-06 18:07:39 665600 ----a-w- c:\windows\inf\drvindex.dat2010-07-06 07:38:00 174 --sha-w- c:\program files\desktop.ini2010-07-06 07:11:43 72704 ----a-w- c:\windows\system32\admparse.dll2010-07-06 07:11:42 832512 ----a-w- c:\windows\system32\wininet.dll2010-07-06 07:11:39 78336 ----a-w- c:\windows\system32\ieencode.dll2010-07-06 07:11:39 48128 ----a-w- c:\windows\system32\mshtmler.dll2010-07-06 07:11:35 26624 ----a-w- c:\windows\system32\ieUnatt.exe2010-07-06 07:11:34 56320 ----a-w- c:\windows\system32\iesetup.dll2010-07-06 06:34:34 1793536 ----a-w- c:\windows\system32\NlsLexicons0045.dll2010-07-06 06:07:56 321536 ----a-w- c:\windows\system32\WSDApi.dll2010-07-06 06:06:28 16710176 ----a-w- c:\windows\fonts\meiryo.ttc2010-07-06 06:06:17 17159388 ----a-w- c:\windows\fonts\meiryob.ttc2010-04-29 09:47:50 499712 ----a-w- c:\windows\system32\msvcp71.dll2010-04-29 09:47:50 348160 ----a-w- c:\windows\system32\msvcr71.dll2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat============= FINISH: 15:51:28.13 ===============Attach.txt will not load to site....say's to big.....only 732kbark.txt fitwill copy and paste attach text if askedthanks in advanced

RELEVANCY SCORE 200
Preferred Solution: last week parinoid , this week infected

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: last week parinoid , this week infected

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREPlease download GMER from one of the following locations and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zipped MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.

Read other 3 answers
RELEVANCY SCORE 86.8

I have never experienced this symptom before: exactly one week ago, after reinstalling everything, as if timed, my computer crashed again after one week of use.

Here is my system makeup Quad Q6600 @ 2.4GHz, P5N-E SLI, with two SLI-ed nVIDIA 8600GT, 4GB RAM Corsair CM2x1064-6400C4 (4-4-4-12), 500GB SATA WD Caviar under WinXP 32bit.

After a about one week (of stability) the system started crashing and become unstable to the point where it would reset (blue screen) every 5min.

Updated the BIOS & reinstalled everything under WinXP 64bit in a second partition (basically left WinXP32bit in one partition with dual boot) and exactly one week thereafter the same symptoms are now happening.

Could it be my RAM as a week ago when I started to get blue screens at one point after resetting itself a couple of times the PC started issuing 20 sec long beeps without restarting. I removed the RAM and had it reseated. Also under the latest BIOS I had it set to 4-4-4-12 for RAM and slowed it down from 800Mhz to 677Mhz.

I now have the feeling that my HDD is at the source of the problem with a bad sector.

Anyone had this kind of symptom http://images.techguy.org/icon/icon6.gif
Cool?

Any feedback is extremely appreciated!
Cheers!
Chris.
 

Read other answers
RELEVANCY SCORE 81.2

Hi. So my cousin's laptop was recently infected with a virus for about a week. I volunteered to fix it without knowing what the actual infection was. The laptop's internet access is extremely slowed, and can't only go into sites that are secure, i.e. https://. There are also many advertisements that pop up, and you can only start the computer in safe mode, as when you boot it normally, it will change the desktop to a blue screen stating "WARNING!!! YOUR'RE COMPUTER IS INFECTED!!!" with mispellings and whatnot. There is also small "microsoft security' box that comes up in the lower right, with a fake Total Virus scanner that comes up and makes you pay to get rid of the so-called viruses. After running Malware Bytes , I found that Vundo was a problem. So I've been scouting the web on another computer and ended up resorting to proffessional help.
I'm pretty decent with computers, but I can't compile things or whatnot. Anyways the HJT log is in the next post.

EDIT:I'm running HJT and posted this in Safe Mode with Networking, as I can't even get to google.com using normal boot.
 

A:Infected for over a week

Read other 12 answers
RELEVANCY SCORE 80.4

..in eradicating some of the infections that were causing me difficulties and after a good long session of running and rerunning applications and uninstalling Java updates i've finally got my laptop reading clear in my installed anti-virus (Avast), online antivirus scanners (eset and kapersky) and multiple antispyware applications (malwarebytes, superantispyware). The thing is my laptop, even though reading clear has started browsing quite slowly so BOOPME (my expert) who's helped me out so far has suggested we take a deeper look. I've done all my logs which i'll post below. One thing i couldn't understand is that in the DDS log it states my antivirus in norton 360. I used to run this over a year ago but removed it using norton removal tool a very long time ago and changed to avast. Other reports show avast installed but the dds one states AV norton 360 updated!!!! I can find no trace of norton on my machine and i'm not even sure if it's even relevant.DDS (Ver_10-03-17.01) - NTFSx86 Run by Jamie at 22:33:36.38 on 16/05/2010Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_20Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.2046.1122 [GMT 1:00]AV: Norton 360 *On-access scanning enabled* (Updated) {A5F1BC7C-EA33-4247-961C-0217208396C4}SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}... Read more

A:I've been infected in the past week

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

Read other 4 answers
RELEVANCY SCORE 80.4

I already scaned my computer/ran spybot, Windows defender, and NAV 2006 and removed what I could, but I cant kick this last one. I believe it has something to do with autosys.exe, I'm getting IE popups+other infections from it. Any help would be greatly appreaciated Logfile of HijackThis v1.99.1Scan saved at 1:09:45 PM, on 1/14/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Diskeeper 9\DkService.exeC:\Program Files\Folding @ Home\FAH504-Console.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\... Read more

A:Infected For 1 Week Now, Cant Kick It

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Next, please reboot your computer in Safe Mode by doing the following :Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;Instead of Windows loading as normal, a menu with options should appear;Select the first option, to run Windows in Safe Mode, then press "Enter".Choose your usual account.Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmdSelect option #2 - Clean by typing 2 and press "Enter" to delete infected files.You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.A text file will appear onscreen, with results from the cleaning process; please copy/pa... Read more

Read other 12 answers
RELEVANCY SCORE 79.2

hi...my system got infected and i keep getting popups.i had this problem a week ago when a kind soul helped me and my system was fine...within a week again i have got infected and i keep getting these popups "powered by zedo" and webbuy.the internet explorer closes all by it self and i don't know what to do. my antivirus doesnot work now and i downloaded mcafee stinger and ran it but it didnot do much. the only programes i use are yahoo messenger and yahoomail...i am not able to see the webcam again.i am posting the log file....please help meLogfile of Trend Micro HijackThis v2.0.2Scan saved at 9:16:37 AM, on 1/22/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16574)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\WINDOWS\cG9vamE\command.exeC:\Program Files\Juniper Net... Read more

A:Infected Twice In A Week...lots Of Popups

Welcome to the BleepingComputer HijackThis Logs and Analysis forum. My name is Richie and i'll be helping you to fix your problems.Apologies for the late response,as i'm sure you can appreciate we are extremely busy.If you've already recieved help at another forum and your issues have been resolved,or you're presently recieving help elsewhere then please let us know.If you have not followed the info in the link below prior to posting your log then please do so now:Preparation Guide for use before posting a HijackThis Log:http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/If you still require help,please post a new Hijackthis log into this topic in your next reply.Also post a detailed description of the issues you're experiencing.*Note*Post all reports/logs directly into this topic,not as attachments,thanks.

Read other 11 answers
RELEVANCY SCORE 79.2

Hello bleepingComputer, I have came to this forum in hope of getting some help fixing my computer which has been infected since last week...My machine have been experiencing slowdowns and lag spikes, slow boot and reboots... Also yesterday i lost my internet connection just like this guy right here http://www.bleepingcomputer.com/forums/topic453308.htmlI tried to look into my network connection and here what i foundAs you can see, all my local internet settings are somehow deletedI scanned with Malwarebytes Anti-Malware but it found nothingAlso kaspersky internet security 2011 found nothing. I don't want to use combofix or SDFix before i'm told to, that why I need some assistance I'm pretty good with computers just tell me what do and I will understand with easeThanks to anyone willing to help me through this, I hope i could solve this program soon so i can get my connection back

A:Computer infected since 1 week, No solution

Please try this.If needed we'll ask for ComboFix. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer.SDFix is an outdated tool. It has not been updated in over 4 years.Please click Start > Run, type inetcpl.cpl in the runbox and press enter.Click the Connections tab and click the LAN settings option.Verify if "Use a proxy..." is checked, if so, UNcheck it and click OK/OK to exit.Now check if the internet is working again.ORGo to Start ... Run and type in cmdA dos Window will appear.Type in the dos window: netsh winsock resetClick on the enter key.Reboot your system to complete the process.If needed : type these one line at a time, press enter after each line. See if it works after each.netsh interface ipv4 reset netsh interface ipv6 reset ipconfig /flushdns WIN7.. Please Download this file, Click Me Right-click on winsockfix.bat and click on Run as AdministratorFrom a flash drive or CD runPlease download Farbar Service Scanner and run it on the computer with the issue.Make sure the following options are checked:

Internet Services Windows Firewall System Restore Security Center/Action Center Windows Update Windows DefenderPress "Scan". It will create a log (FSS.txt) in the same directory the tool is run. Please copy and paste the log to your reply.

Read other 9 answers
RELEVANCY SCORE 78.4

I wrote last week regarding my infected computer. I understand everyone is busy but i reached a point that I knew i was violated and it looked like from the day I received myalaptop.. It took 3 tries to reinstall/reformat teh hard drive and despite my best attempts at fixing my xps 1330 i have had no luck.

I know someone is sing my network and at this point has managed to use my old inspiron 9300. I have HJT logs for both systems.

Since I"ve reformatted the xps harddrive and it still keeps coming back I don't know how to fix this now. I just switched from dsl to fios and initially i was abe to use my internet on my my clean system (which canot even load most spyware software) and now I cannot even get out because someone else is using it.

I can see the problems in the code in that good dll have ben told to read something else but I can't get rid of he files.

PLEASE help i will run what ican to post but I am limited even in safemode.

thanks in advance. (for the record I haven't even gone into email for 5 days just in case it came from an ads fille but my system is now clean of those).

sincerely,

kimberly

A:System Infected Still Waitin For Response After 1 Week

Hello finewines,Your most recent HJT log posting was here: http://www.bleepingcomputer.com/forums/t/84265/laptop-slowdown-potentially-bad-files/ You received a response but you did not reply further to that thread so it was closed by the helper. However, that log is from last year.Were you referring to this post: http://www.bleepingcomputer.com/forums/t/137282/infected-with-something-thats-using-ipnetwork/? You did receive a response - the same day you posted. Please follow the directions quietman7 has provided for you there.To avoid confusion, this topic is now closed.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 77.6

This week my main pc was infected with Ransom:win32/Croti.
My main protection program is MS Security Essentials. I was a bit surprised since I routinely keep my virus def.s up to date & stay off of any risky (??) sites. (You’ve heard it all many timesJ) No other PC’s on my Home Network appear to be affected.
I’ve applied all the fixes recommended b y knowledgeable sites (MBAM, MBAM Anti Rootkit,
Rkil, etc. However, I plan to do a complete clean install(including pull Ram/Batt, write zeros to HDD, & the reinstall my WIN7 Pro x64.
My primary concern is can I recover any of my corrupted files which I can no longer read?) I do have some external backup files I can depend on but several recent files on the affected PC can no longer be read.

Thank you for any comments

PC Vitals:
ASUS FA85 Mobo
AMD A10 5800k
16GB RAM
Win7 Pro 64bit SP1

A:This week my main pc was infected with Ransom:win32/Croti

Unless you pay the ransom you will have to restore from backup. Bunch of info here CryptoWall - new variant of CryptoDefense - General Security

Read other 4 answers
RELEVANCY SCORE 76.8

Start with Coupon Factory showing me various ads on websites, constant hyperlinked words on any website I would visit and then if I scrolled over it it would pop up a new tab. Removed the extension several times from chrome and it would come back, uninstalled the program and everything and it would come back. Haven't seen it in two days and now I am infected with a new ad called Dragon Branch. Haven't downloaded anything in that brick of time and Dragon Branch re directs me to ad sites, consumes my google search and has various pop ups.
 
Halp pls.
 
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-04-2015 01
Ran by Julian (administrator) on JULIAN-PC on 28-04-2015 22:03:02
Running from C:\Users\Julian\Downloads
Loaded Profiles: Julian (Available profiles: Julian)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\P... Read more

A:Infected with various Adware for the past week! (Coupon factory/DragonBranch)

Hi & to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.
Before we move on, please read the following points carefully:
My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
If I don't reply within 24 hours please PM me!
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
P2P warning
Going over your logs I noticed that you have µTorrent installed.
Avoid... Read more

Read other 10 answers
RELEVANCY SCORE 64.8

train every week, even if it is half a kilo. You'll be surprised how quickly you can start lifting weights you could never have imagined, and surely you'll be asking for more each time. The same applies to all your exercises with cardio, pilates and yoga, tetate to last a little longer, to hold the iron more, to get 100
 

Read other answers
RELEVANCY SCORE 64.8

What's a think see.

Read other answers
RELEVANCY SCORE 64.8

according to mspcbeta on MDL

"RTM final will appear next week!

specific time can not be disclosed!

and 7600.16385 very close to RTM final!we can wait until next week! "

A:RTM will appear next week

link to source ?

Read other 9 answers
RELEVANCY SCORE 64.8

so ive been running windows 7 for over a week now and just encountred my first error and i think its a system wrecker . it all happened when i was downloading some gadgets to add to my desktop to enhance my performence on some level when i decided to restart my computer , nuthin out of the ordinary just a simple restart. so i reached my desktop main page and wanted to browse the internet for more gadgets when my cursor turned into the loading cursor and froze my whole system , i thought that the windows update might be loading something or installing but after 10 minutes nuthin happened , i tried to check if there is anything in my task manager that might be not responding but nuthin showed up and the loading cursor was always there ... i am running out of ideas on what to remove or unistall , i am currently running under safe mode to try to find a solution for this problem but nuthin is turning out promising so far . backed up my files just in case . is it possible that i got myself a bad copy of windows or is it a problem with a soltution ?

A:1 week later ...

Was this a freeze or a BSOD??

Read other 4 answers
RELEVANCY SCORE 64.8

When I right click on my taskbar and go to toolbars and click on Quick Launch to put the icons on the left of the taskbar I get a double width taskbar. I pretty sure it's because the day of the week appears with the time and date. How do I get rid of the day of the week?

A:Day of the week

XP will, by default, show the day if the taskbar is double wide. Have you tried unlocking it, dragging it down to single size and relocking?

Read other 2 answers
RELEVANCY SCORE 64

Fresh install of Windows 7 64-bit on or about April 1st. Crashes have been happening ever since.

Event ID 41 (which says not much), but Kernal-Power is the source every time.

Potential causes (my guesses):
Incorrect Raid controllers - I had to find new ones compatible with win 7 when I installed fresh.

Radeon 5700 graphics card driver issues, although I loaded the 8.723.0.0 drivers released on 4/28/2010.

Sleep/Hibernation issue. More often than not, I see a "Windows has recovered from an unexpected error" pop-up after I leave it alone for several hours.

Thanks in advance for examining my problem.

A:10 BSODs in a week

And just when browsing to see what problems other people are having...

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: 50
BCP1: FFFFF900C23D8FF8
BCP2: 0000000000000001
BCP3: FFFFF960001939C6
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\050910-15553-01.dmp

Read other 9 answers
RELEVANCY SCORE 64

Hello All,

This week my computer was running slow again.
I seem to be like the guy in the old Li'l Abner
cartoon holding the umbrella in the sunshine but
it is raining on him INSIDE his umbrella with this
virus thing. Almost enough to make me break down
and buy a MAC.

Anyway the new intruder or intruders make two files,
evPvO17M.exe & hki347.exe which bring the computer to
a near standstill as they spawn several copies on boot.
I see many of them running at about 2,000kb in the
Task Manager Processes tab.

Have spent the entire day yesterday on this with no other
result than finding a work around until my anti-virus
folks can make a cleaner to get rid of the mother file
that spawns these critters which so far remains undetectable.

The work around is to go immediately to the Task Manager
Processes tab on startup and remove the files as fast as
possible. It seems that the creation of new ones only
happen at re-boot.

You can find them in the user/local settings/application data
or temp folders, sometimes in both.

I would be interested to know if anyone else has seen this
virus.

Regards,
George

A:New Virus(es) this week

Turns out my "work around" didn't work.
Even after removing them from the Processes
tab in the Task Manager, they continue to spawn.

Only thing is to check when the computer
gets unbearably slow and start clicking them off

Read other 1 answers
RELEVANCY SCORE 64

Is Windows 7 Ultimate x64

- originally Vista Ultimate x64 (OEM) and XP Prof x86(full retail version) was installed with dual boot.

The system is 2 years old.

I formatted and installed Windows 7 Ultimate x64 about a month ago. No more dual boot.

I have BSOD's at about once a week and do not know what it is that is causing it. I've run "WhoCrashed"
everytime it does crash, but could not get any info that would give me an idea of what the problem could be.

A:BSOD about once a week

  
Quote: Originally Posted by Ger83


Is Windows 7 Ultimate x64

- originally Vista Ultimate x64 (OEM) and XP Prof x86(full retail version) was installed with dual boot.

The system is 2 years old.

I formatted and installed Windows 7 Ultimate x64 about a month ago. No more dual boot.

I have BSOD's at about once a week and do not know what it is that is causing it. I've run "WhoCrashed"
everytime it does crash, but could not get any info that would give me an idea of what the problem could be.



Hi.
Ur minidumps point to ntkrnlmp.exe
Some info for this error: Error message: "Windows could not start because of a computer disk hardware configuration problem" and NTOSKRNL.EXE is missing or corrupt.
-----------------------------------------------------------------------
And please uninstall AVG an install MSE Virus, Spyware & Malware Protection | Microsoft Security Essentials

Read other 4 answers
RELEVANCY SCORE 64

Hi

I just bought this PC HP P6240F on Dec 13/09, it has run CHKDSK twice now on startup.

First one was a day or 2 after I got it, and possibly after some installs and Windows updates...the second was this morning (dec21)...and I never did any installs, downloads, or windows updates, just basic Internet email stuff....

I now chkdsk from when a HDD is going bad, or has had maybe a bad shutdown, so I am concerned...I'm ready to return this PC....am I right to be concerned?

thanks
 

A:New PC has gone to CHKDSK twice in 1 week

Read other 8 answers
RELEVANCY SCORE 64

I started getting the blue screen about a week ago and it has happened twice now in as many days.
I attach the dump files as a zip file.
Thanks!
Veronica

A:4 BSOD in a week please help

  
Quote: Originally Posted by VSellar


I started getting the blue screen about a week ago and it has happened twice now in as many days.
I attach the dump files as a zip file.
Thanks!
Veronica


Hi Vsellar and welcome

these were all caused by your Maxtor one touch driver (mxopswd.sys). I would remove it to test and re-install only if absolutely needed. If you realy need it (I can only guess why) I would get the newest copy directly from Maxtor and install it.

Let us know if you need assistance
Jan



Code:
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Fri Jun 25 10:25:50.651 2010 (GMT-4)
System Uptime: 1 days 1:00:57.789
BugCheck D1, {93c596e6, 2, 8, 93c596e6}
*** WARNING: Unable to verify timestamp for mxopswd.sys
*** ERROR: Module load completed but symbols could not be loaded for mxopswd.sys
Probably caused by : mxopswd.sys ( mxopswd+56e6 )
BUGCHECK_STR: 0xD1
PROCESS_NAME: svchost.exe
??????????????????????????????????????????????????????????????????????????????????????
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Wed Jun 23 15:58:54.551 2010 (GMT-4)
System Uptime: 2 days 0:02:15.689
BugCheck D1, {934346e6, 2, 8, 934346e6}
*** WARNING: Unable to verify timestamp for mxopswd.sys
*** ERROR: Module load completed but symbols could not be loaded for mxopswd.sys
Probably caused by : mxopswd.sys ( mxopswd+56e6 )
BUGCHECK_STR: 0xD1
PROCESS_NAME: stacsv.exe
??????????????????... Read more

Read other 9 answers
RELEVANCY SCORE 64

I've used PC Refresh since CP on my dual-boot and it really helps to use that handy feature, but reinstalling is more dangerous. Keep your Windows 7/8 Product Key for the upgrade.

How do you feel?

A:PC Refresh, almost every week

I think refresh is an upgraded version of system restore. I used it last night to troubleshoot an issue with WPA2 i've been having. Turns out I was missing some important files and it prompted me to insert my installation media. This morning i'm doing a full format and reinstall just to be safe because after the refresh It was giving me some weird errors.

Read other 9 answers
RELEVANCY SCORE 64

My HP laptop did an update this week.  When I went to shut down it said i could update and restart or update and shut down so i opted to update and shut down.  The next day it was still trying to update so i left it and checked back that evening.  It had finally update however everythng I had on it was gone.  According to the update log, I have never updated it.  Also, it acts as if it's fresh out of the box even though it's over a year old.  I have to relog into everything and it's acting very slow and strange.  Anyoe else have this happen?

Read other answers
RELEVANCY SCORE 64

Hi, I'm trying to get the name of the weekday in the date/time option on the task bar to show, I have read all the customizations on your site(that's how I found you), but try as I might , I haven't been able to get the day of the week and date to continually show in the task bar. It will show the format I selected, IF I hover my mouse curser over it. I have tried all the combinations and how to's on the internet, and nothing has worked. Is there a setting I'm not seeing that has to be enabled or disabled? Please help.I have a gateway computer 62 bit and running windows 7

A:taskbar week day

Hello,

Just to be sure and not to belittle you in case you did, but you went into the date/time settings within the options and altered the dd/mm/yy settings correct?

Read other 9 answers
RELEVANCY SCORE 64

My OS is W2K. I recently had to install a new hard drive. The other one had hard disk errors. My computer is now crashing on a weekly basis. I cannot figure out what the problem is. Last crash was 3/7 am. Got an error for the printer (HP all in one) when shutting down the night before. I have re-installed windows and my antivirus (system suite 5). Can you tell me what could possibly be making my system crash? I did not have a virus or trojan.
 

Read other answers
RELEVANCY SCORE 64

I am constently getting a BSOD it just happens when I am watching youtube or opening a word document or just in the middle of working on personal files.

A:3rd BSOD I have had in a week Help please

Also it is running really slow here lately

Read other 3 answers
RELEVANCY SCORE 64

Hi

Hope someone can shed some light on this issue, Dell refused because of "not original equipment"
I'm unable to find the tech who built this unit so here we go.

Dell Latitude D510
Win XP home sp2
Pentium M 1.86GHz
504 MB RAM

I bought this laptop used and it worked great for 2 years until now, it seems every week I'm burdened by the cumbersome task of having to reinstall XP and other software due to,

1) an abrupt slow down and then freezes.

2) after manual restart, windows doesn't load, instead I get a black DOS like screen & message = "corrupt or missing file",
<windows root>\system32\ntoskrnl.exe.

3) Attempted to run repair option on XP cd a few times (didn't work) resorted to reformat and clean install.

I have checked for disk errors and ran a memory test.....no problems
I eliminated some software and adjusted some configurations, I even updated drivers and it still crashes after a week.

Thanks
Art B.

A:my O/S crashes every week

Look thru the errors in Event iewer . . Right click on My Computer . . select Manage . . Event Viewer

Read other 4 answers
RELEVANCY SCORE 64

I've used PC Refresh since CP on my dual-boot and it really helps to use that handy feature, but reinstalling is more dangerous. Keep your Windows 7/8 Product Key for the upgrade.

How do you feel?

A:PC Refresh, almost every week

I think refresh is an upgraded version of system restore. I used it last night to troubleshoot an issue with WPA2 i've been having. Turns out I was missing some important files and it prompted me to insert my installation media. This morning i'm doing a full format and reinstall just to be safe because after the refresh It was giving me some weird errors.

Read other 9 answers
RELEVANCY SCORE 64

No, I don't need help.

No, I have not had an issue.

I just had to post this somewhere.

I am no Microsoft fanboy, but they rule the roost and all the apps and games in the world seem to require Windows, or run best on it. I truly hate their marketing and general behavior in the marketplace.

All this said, I have never been happier with an OS. I had NO issues finding drivers, my HD4890 runs at least 3x better with the 64bit drivers, I have yet to find an app (other than Blender ) that doesn't start right up and run, I couldn't get my MoBo to go 4-up on 32bit Xp, but the 64bit gobbles up 4 sticks (2x 2Gb and 2x 1Gb Doms), my CPU is experiencing a new birth....

I am floored.

I swore I'd never leave Xp until someone could beat Microsoft to a better mousetrap. I listened to people that said 64bit OS was "specialty" and "not needed for everyday users".

How wrong they were. The performance increase is staggering.


I always see complaints and issues on this site (logically so..), I've posted a few (or more) myself. This time I just wanted to say, "All is right and well, thank you!"

(As an aside, I got Blender to work fine by using 32bit dowload installed on my jump drive. Works like a charm, if a bit of an odd way to work around it.)

A:W7 64bit: One week later

Windows 7 is a very good OS - as was/is Vista. Windows 7 & Vista are siblings; XP is a distant cousin to both.

jcgriff2

.

Read other 1 answers
RELEVANCY SCORE 64

I have had 2 BSOD occur this week. I managed to install the debugging tools and get a readout on both of them, but I am not sure how to interpret the results. If someone can help I'd be much obliged. Thanks in advance.

Sam

A:2 BSOD this week, what gives?

  
Quote: Originally Posted by samhfoley


I have had 2 BSOD occur this week. I managed to install the debugging tools and get a readout on both of them, but I am not sure how to interpret the results. If someone can help I'd be much obliged. Thanks in advance.

Sam


Hello Samhfoley,

Follow this link and post us the logs http://www.sevenforums.com/crashes-d...tructions.html

- Captain

Read other 6 answers
RELEVANCY SCORE 64

Hi

Hope someone can shed some light on this issue, Dell refused because of "not original equipment"
I'm unable to find the tech who built this unit so here we go.

Dell Latitude D510
Win XP home sp2
Pentium M 1.86GHz
504 MB RAM

I bought this laptop used and it worked great for 2 years until now, it seems every week I'm burdened by the cumbersome task of having to reinstall XP and other software due to,

1) an abrupt slow down and then freezes.

2) after manual restart, windows doesn't load, instead I get a black DOS like screen & message = "corrupt or missing file",
<windows root>\system32\ntoskrnl.exe.

3) Attempted to run repair option on XP cd a few times (didn't work) resorted to reformat and clean install.

I have checked for disk errors and ran a memory test.....no problems
I eliminated some software and adjusted some configurations, I even updated drivers and it still crashes after a week.

Thanks
Art B.
[email protected]

Read other answers
RELEVANCY SCORE 64

An example is probably the best way of doing this so here goes....
Every day my department spend different amounts of money on their lunch. What I want to do is calculate how much they have spent over the week (I do this summary every year).

An example of the data I have is

Name Date Of Purchase Cost

Bart 13/12/2001 10

Lisa 14/12/2001 8

Homer 14/12/2001 50

Marge 17/12/2001 10

Maggie 17/12/2001 4

Homer 18/12/2001 45

Marge 25/12/20001 12
****************************************
What I Want It To Show

10/12/2001(Week Commencing) 68

17/12/2001(Week Commencing) 59

24/12/2001(Week Commencing) 12

Does Anyone Know How To Do This!!!??
Thanks

The Great One
 

A:Week Commencing

What are you doing this in? If it is in MS Access, I would suggest you look at the DATEPART function (especially the "ww" code). You could probably do a GROUP BY where the Date Of Purchase is in the week. Look it up and play with it and if you still need help, post back...

Hope that helps...
 

Read other 2 answers
RELEVANCY SCORE 64

my friend is going away for 2 weeks, and wants to unplug his pc as he doesnt like to leave plugs in while he's on holiday, what we want to know is, is this a wise move.

i know there is a battery in the tower, but what does it do, and will it be able to do whatever it does for 2 weeks with no power on.
 

A:2 week shutdown

Read other 8 answers
RELEVANCY SCORE 64

Is there a power source that could wear down like a battery inside of a computer? I mean, I know of the tiny batter that runs small stuff, but I mean like a large one. My computer slowed down like it was so week it could not turn on my monitor or open a site. I had it clean as a whistle (thanks to Tech Support Guy).
Any ideas?
Thanks.
 

A:Week Computer?

Read other 16 answers
RELEVANCY SCORE 64

Do you think DVD will make VCR extinct or do you think some other format will run DVD out before it has a chance to become the primary way of viewing movies.

Dont be afraid to put in your opinion
 

A:Question Of The Week !!

Read other 10 answers
RELEVANCY SCORE 64

Keep having this blue screen.
In parallel have a problem in all of the browsers: pages keep crashing, most often happens in Chrome. eBay is heavily used and hugely affected by this problem. it could crash before the page loaded. Not sure if it has any connection to the blue screen though.
Had a Geforce graphic card prior to replacing with Radeon. Have uninstalled the Geforce driver before installing the Radeon.
Blue screen just happens, could be 1 second after PC has loaded, or 2 hours after. 2 days ago had a large Win 10 update , after which PC became relatively stable, but had 1 blue screen since. But anyway PC feels more solid, and Chrome pages crash less frequently.

A:IRQL_NOT_LESS_OR_EQUAL once a week

Please remove ASUS software & Tweaking program, ASUS software is known for causing BSODs and I would like to prevent the Tweaking program causing problems.

Please remove Kaspersky and use Windows Defender as alternative.
Service articles

Code:
ffffd000`249e1658 fffff800`1d7d4c75Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
klif+0xb4c75


Diagnostics Test

 System File Check

Please try following:
Open an admin command promptCopy/paste "sfc/scannow" (without quotes) and press enterWhen it finished reboot your systemOpen again an admin command promptEnter sfc/scannow again
If sfc/scannow says "Windows Resource Protection found corrupt files but was unable to fix some of them" after the second SFC, please upload the cbs.log file located at %systemroot%\Logs\CBS\, if the file is too large try a 3rd party uploader like dropbox, onedrive, google drive, mediafire etc.
System File Check(SFC a.k.a. Windows Resource Protection) needs to have your system rebooted in order for sfc to try to fix the problems that it finds.

Make a photo of SFC and post it.

Please fill in your system specsPlease follow this tutorial and download the tool. The tool will give you detailed information about your system specs, please fill in your system specs more completely including PSU, cooling system... Read more

Read other 1 answers
RELEVANCY SCORE 64

My Alienware Aurora R3 hangs up about once a week, always in the morning. I start the PC about 8am, check the weather forecast, then leave it for an hour or so. The screen is set to go into standby after 10 mins idle. The PC into sleep mode after 2 hours. Sometimes, when I return after an hour and jiggle the mouse there is no response. The white led on top of the PC that flickers when PC is working is stuck on with no movement. I need to turn the PC off at the power button then on again. After that it works ok for a week or so 'till it happens again. The problem shows as Kernel Power event 41 which only refers to the restart. I have Iolo System Mechanic on board.
Any ideas folks?

A:PC hangs, once week.

Hi,

First and most important, get rid of Iolo System Mechanic. This type of software rarely does anything good and I'm not familiar with this particular one but they can very often cause problems.

You should use the free version of Revo Uninstaller to remove it. Use advanced mode and that way you make sure nothings left lurking in your registry.

If the hangs persist after that, please follow the instructions here,

http://www.techsupportforum.com/foru...ta-452654.html

Read other 2 answers
RELEVANCY SCORE 64

The ever popular VLC is due for a major release this week as reported on CNET.com

http://download.cnet.com/8301-2007_4-57376877-12/vlc-2.0-brings-blu-ray-playback-sleek-new-ui-more-to-mac-os-x/

Changelog: http://git.videolan.org/?p=vlc%2Fvlc-2.0.git&a=blob_plain&f=NEWS

A:VLC 2.0 due for release this week

I love VLC!!!!!!

I have v0.7 and its excellent!!!! (Screamer-radio is another EXCELLENT player i have)

Read other 1 answers
RELEVANCY SCORE 64

I am getting BSOD screen once a week ever since I started using my new motherboard a few months ago. It re-boots fine. I bought an ASUS P5Q SE PLUS the BSOD error is:

IRQL_NOT_LESS_OR_EQUAL
The IRQL_NOT_LESS_OR_EQUAL error is caused by a buggy device driver or an actual hardware conflict. If you've recently added new hardware to your system, try removing it and see if the error goes away. Likewise, if you've recently loaded a new device driver, you might try using ERD Commander Professional Edition, by Winternals Software, to temporarily disable the new driver and see if the problem goes away.

I am running Windows 7 Ultimate 32 bit. The last hardware and driver I installed was my graphics card ASUS EN9800GT with driver: 8.17.11.9713 which I downloaded from the Nvidia web site.

When I first bought the MB I flashed the BIOS to the latest available ver. 2204 I did a clean install reformatting the hard drive. I then installed all the Win 7 (32bit) drivers available from the ASUS web site (Except for the RAID drivers which I won't use anyway) then I installed the graphics driver.

I contacted ASUS support and they said BSOD screens usually occur with memory issues. They asked me to run a memory diagnostic test (Which I did x2 and it checked out fine using Windows Memory Diagnostic Tool and Memtest86 v. 4.10) They also told me that if the memory test was OK that I could RMA my motherboard.

It doesn't make sense to me to RMA the motherboard if the problem turns out to be ... Read more

A:BSOD once a week

  
Quote: Originally Posted by Timewarpone


I am getting BSOD screen once a week ever since I started using my new motherboard a few months. It re-boots fine. I bought an ASUS P5Q SE PLUS the BSOD error is:

IRQL_NOT_LESS_OR_EQUAL
The IRQL_NOT_LESS_OR_EQUAL error is caused by a buggy device driver or an actual hardware conflict. If you've recently added new hardware to your system, try removing it and see if the error goes away. Likewise, if you've recently loaded a new device driver, you might try using ERD Commander Professional Edition, by Winternals Software, to temporarily disable the new driver and see if the problem goes away.

I am running Windows 7 Ultimate 32 bit. The last hardware and driver I installed was my graphics card ASUS EN9800GT with driver: 8.17.11.9713 which I downloaded from the Nvidia web site.

When I first bought the MB I flashed the BIOS to the latest available ver. 2204 I did a clean install reformatting the hard drive. I then installed all the Win 7 (32bit) drivers available from the ASUS web site (Except for the RAID drivers which I won't use anyway) then I installed the graphics driver.

I contacted ASUS support and they said BSOD screens usually occur with memory issues. They asked me to run a memory diagnostic test (Which I did x2 and it checked out fine using Windows Memory Diagnostic Tool and Memtest86 v. 4.10) They also told me that if the memory test was OK that I could RMA my motherboard.

It doesn'... Read more

Read other 9 answers
RELEVANCY SCORE 64

I posted over a week ago and bumped it two days later and never got a response so I'm posting a new thread so I have a 0 post count.

Here are the issues I'm having:
-when I click on internet explorer it takes over a minute and sometimes up to two minutes before I can use the window. This is new within the last 2-3 weeks. The window pops up and it says connecting but I can't do anything with it. Anytime I open a new IE window or new tab within an existing window I have this same problem of having to wait for it.

-When I start my computer I get an error message saying it couldn't load the apoint.exe dll or something like that.

-Sometimes when I look in my history (it's not there now so this might not be completely accurate) it shows something like a.doginhispen and something else similar to it. Someone told me these are nasty but they have not shown up on my sophos scan or my spybot scan.

-I can no longer update adaware. It wont connect no matter how many times I try it.

Here is my HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:20:32 PM, on 2/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\... Read more

A:Been over a week...please check my HJT log

Read other 16 answers
RELEVANCY SCORE 64

Hi I can't log in of one my account since it said someone using my account, i try contact Hotmail team but nothing help, as i need the account back soon as can.

I wait for reply.
 

A:Solved: Can't log in (as been a week)

Please see this thread.................
http://answers.microsoft.com/en-us/windowslive/forum/hotmail-wlsecurity/how-to-unblock-hotmail-account-when-verification/1cb85e07-aaf5-49e6-9891-c9f1f59b77a9?msgId=8a205a30-3d2d-4a54-8299-e2c2a1d25b19
Or this page........................
http://windows.microsoft.com/en-US/hotmail/account-temporarily-blocked-faq
 

Read other 3 answers
RELEVANCY SCORE 64

Hello,

Please help me with BSOD. Been occuring since i bought this pc. Minidump included.

Windows 7 is 32bit OEM. Everything is 2 weeks old.

Thanks.

A:BSOD - For 1 week now

  
Quote: Originally Posted by dirknaruto


Hello,

Please help me with BSOD. Been occuring since i bought this pc. Minidump included.

Windows 7 is 32bit OEM. Everything is 2 weeks old.

Thanks.



A couple of problems
1-sptd.sys
Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads

You can use MagicDisc as an alternative.

Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

2-Hardware

Most of these were caused by hardware. Please read here and follow the instructions.

Your .dmp file shows a stop error of 0x124 which is a general hardware error .. A "stop 0x124" is fundamentally different to many other types of bluescreens because it stems from a hardware complaint. Stop 0x124 minidumps contain very little practical information, and it is therefore necessary to approach the problem as a case of hardware in an unknown state of distress. You can read more on this error and what to try here... Stop 0x124 - what it means and what to try Stop 0x124 - what it means and what to try

Thanks
Ken

Read other 5 answers
RELEVANCY SCORE 64

Should the government be allowed to mandate a change in technology such as digital T.V.?

Thanks for your oppinions =)
 

A:Question of the Week.

The British government has already done this admittedly over the course of the next few years.
 

Read other 2 answers
RELEVANCY SCORE 64

hello friends i have bsod once in a week and i dont know the reason.

i upload the DM Collector report and the Bsod Report.

thnx for help!

A:bsod once in a week

Dont alter the DM Log, post it as it is from the next time.

One thing is noticeable there that is the BIOS version.

Code:
BiosVersion = FJ
BiosReleaseDate = 04/28/2011
SystemManufacturer = Gigabyte Technology Co., Ltd.
SystemProductName = EX58-UD3R
Gigabyte does not list this version, it is removed from the list. That means they dont recommend it to use.

Try to update the BIOS to version FK from GIGABYTE - Motherboard - Socket 1366 - GA-EX58-UD3R (rev. 1.7) and see how it goes. Let us know the resulting situation.

   Warning
The BIOS update is a critical process. Any wrong step in the process may damage the BIOS permanently, and hence it is a risky process. If you dont have any previous experience with the BIOS update, dont try it yourself but take assistance of somebody who knows it. Or ask a tech to do it for you.

A clean reinstall after the BIOS update gives a better result.

__________________________________________________________

Code:
BugCheck 109, {a3a039d89866970c, 0, cc5ba75da219c034, 101}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

Read other 1 answers
RELEVANCY SCORE 64

Hi I had a bluescreen last monday (6 days ago), and I had another one today. Last sunday I had random programs open, and I was watching a starcraft 2 replay when the blue screen hit me. Today I was just watching a video on the internet.

I tried downloading symbols and windows debug. The earlier minidump said something like "Probably caused by : memory_corruption," which sounds like it could be a billion things. I don't think my RAM is faulty - this pair has been working fine for several months, and after running memtest for 3h it showed no errors. Other minidump was more complicated so I have no idea.

Halp?

Btw I'm new here. Hi!

A:2nd bluescreen of this week

BSOD errors 7E, 24 ( Ntfs!NtfsCommonWrite+da0 ).



Replace Avast with MSE:

avast! Uninstall Utility

http://www.microsoft.com/security_essentials/



Uninstall:

RTCore64.sys Wed May 25 09:39:12 2005
RMClock/CPUGenie



Update:

speedfan.sys Sun Sep 24 16:26:48 2006
Speedfan

AtiPcie.sys Tue May 05 18:00:22 2009
ATI PCIE Driver for ATI PCIE chipset

nusb3xhc.sys Fri Jan 22 05:22:21 2010 (latest is April 2010)
nusb3hub.sys Fri Jan 22 05:22:18 2010 (latest is April 2010)
Motherboard USB 3.0 by NEC Electronics Corporation




If crashes persist, test your hdd for errors:

Disk Check

HD Diagnostic





Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\101010-25864-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0305f000 PsLoadedModuleList = 0xfffff800`0329ce50
Debug session time: Mon Oct 11 09:46:10.029 2010 (UTC - 5:00)
System Uptime: 5 days 5:53:10.793
Loading Kernel Symbols
...............................................................
........................ Read more

Read other 1 answers
RELEVANCY SCORE 64

Hello,

i have my web moved from old server to new server.

i changed the DNS in my godaddy control panel.
the DNS has been updated after few hours to the new one. my chrome browser is still points to old server. while the IE can successfully point to new server. now this is normal behavior and it could happen,

after 2 days both my chrome and IE are pointing to the new server. but i have problem with my Microsoft Outlook. the mail server is still points to the old server (mail.mydomain.com) and it still try to bring emails from my old inbox host!!!
these mail problem has been exist since one week! Outlook still wants to bring the inbox contents from old server.!

I can get ride of this problem by logging in using VPN (EU IP) then my outlook can grape my inbox from new server.

when i loggin using my local internet without VPN, the Outlook try to get emails from old server!!

what to do?

wait another week?

is this problem from my ISP?
 

Read other answers
RELEVANCY SCORE 64

About a week ago I noticed that pop ups began appearing on my computer sporadically. They would happen for an hour or two, generally every ten minutes or so one or two new advertisements would spring up.

On occasion a website will be redirected to a site that I did not go to and I have to refresh the site to get to my real destination.

The only other problem I have found is that from time to time sites like Hotmail, Gmail, Facebook, and Myspace have to be refreshed two or three times before they will load properly. At times they will load but then not cooperate (such as trying to sign out and the website not responding upon first click.)

I have ran Norton, Spybot, and MBAM in safe mode twice in the last week. On Sunday, MBAM found a trojan and took care of it (it did not show up in subsequent MBAM scans), and Norton eliminated a single tracking cookie that showed up in its scan. Same with Spybot.

However, the on again/off again pop up ads and occasional re-directs continue.

It has me quite stressed because I am a freelance writer and have had to postpone my editors because I am not sure if I would be putting them at risk or even possibly compromising my computer.

I am currently running a Dell manufactured desktop with Windows Vista operating system, and all security features have been kept up to date.

I do have an administrators account that I am the only one who accesses, though members of my family do use the computer in an open account with limited privledges. I ... Read more

A:Pop Ups and Redirects for a Week

I did a new MBAM scan last night, using the quick scan option, and it discovered Trojan.Vundo. It stated that they were slated for deletion upon restart. Here is the log from the MBAM scan after restart to see if that will help you guys out with this:

Malwarebytes' Anti-Malware 1.41
Database version: 3059
Windows 6.0.6002 Service Pack 2

10/30/2009 3:10:00 PM
mbam-log-2009-10-30 (15-10-00).txt

Scan type: Quick Scan
Objects scanned: 99794
Time elapsed: 7 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
 

Read other 1 answers