Over 1 million tech questions and answers.

20 Million Credentials Stolen From Russian Dating Site 'Topface'

Q: 20 Million Credentials Stolen From Russian Dating Site 'Topface'

 

A database containing details of more than 20 Million users of a Russian-based online dating website has been allegedly stolen by a hacker and made publicly available for sale through an online forum.
 
A hacker using the online alias "Mastermind" on an online forum used by cybercriminals claims the responsibility of the hack into an unnamed online dating website, according to recent reports.
 
The leaked credentials are claimed to be 100% valid in a posting to a paste site, and Daniel Ingevaldson, chief technology officer of Easy Solution, said that the list included email addresses from Hotmail, Yahoo and Gmail.
"The list appears to be international in nature with hundreds of domains listed from all over the world," Ingevaldson said in a blog post on Sunday.
"Hackers and fraudsters are likely to leverage stolen credentials to commit fraud not on the original hacked site, but to use them to exploit password re-use to automatically scan and compromise other sites including banking, travel and email providers."
The list of leaked data contains over 7 million credentials from Hotmail, 2.5 million from Yahoo, and 2.2 million from Gmail. 50% of the credentials were for people based in Russia, and 40% came from the European Union.
 

 
However, it is unclear how the credentials from the dating website were stolen and if the database contained the passwords in encrypted form or in plain text.
 
 

20 Million Credentials Stolen From Russian Dating Site 'Topface'
 
 
 
 

RELEVANCY SCORE 200
Preferred Solution: 20 Million Credentials Stolen From Russian Dating Site 'Topface'

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: 20 Million Credentials Stolen From Russian Dating Site 'Topface'

Which reminds me....
 

 
Yes, I know all Russian women are beautiful. But I still laugh at this and besides....it was made maybe in the early '80s during the Big Chill.
It was just one of the ways we Americans coped with that....through humor.

Read other 1 answers
RELEVANCY SCORE 85.6

Apple Device IDs and various other choice bits of personal data were found in a list on an FBI laptop that was breached in March this year. This list contained a LOT of information about each device, including full names, mobile numbers, addresses, and all kinds of other personal tracking data from the devices. Today, AntiSec group released 1 million of those. Peter Kruse, an eCrime specialist working with CSIS Security Group A/S in Denmark tweeted about finding 3 of his iDevices on the list.http://lifehacker.com/5940197/1-million-apple-device-ids-leaked-12-million-total-stolenMore Apple security fail? Or have they willingly given access to the FBI to this information? Interesting.... I don't own iDevices, but a lot of folks do. I certainly wouldn't want my data in a list in anyone's hands.... This ain't good folks.Edited to add link to pastebin of release (which has a lot of blablabla about the motives):http://pastebin.com/nfVT7b0Z

A:12 Million Apple UDIDs stolen, 1 million leaked

Check for your UDID/UUID in the leaked list:

http://thenextweb.com/apple/2012/09/04/heres-check-apple-device-udid-compromised-antisec-leak/

Read other 5 answers
RELEVANCY SCORE 74

Recently I have been getting alot of popup internet explorer pages generally being the same few, zedo, russian dating, porntube, finditquick, 888ladies, and the irritating TotalSecure2009 which opens up when you decline their free invitaion to download their antivirus. My computer also seems to be running alot slower than usual. My problem sounds alot like the problems on both of these threads:

hxxp://www.techsupportforum.com/security-center/hijackthis-log-help/301178-totalsecure2009-virus.html

hxxp://www.techsupportforum.com/security-center/hijackthis-log-help/217517-computer-running-slow-zedo-ads-keep-popping-up.html

I am using a laptop on windows xp, intel centrino.

here is the log i got from running HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:59, on 14/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\hpq\HP Wireles... Read more

A:TotalSecure2009,Zedo,888ladies,Russian dating popups and also computer running slow

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Please copy this page to Notepad and Save it to your Desktop in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop
Disable your AntiVirus and AntiSpyware ap... Read more

Read other 9 answers
RELEVANCY SCORE 71.2

From the NYTimes:Personal electronic data on up to 26.5 million military veterans, including their Social Security numbers and birth dates, was stolen from the home of a Department of Veterans Affairs employee who had taken the information without authorization, the agency said today.It is not known whether the information has been misused or not, or whether the thieves understand what they have, but this could be the largest identity thefts in history.http://www.nytimes.com/2006/05/22/washingt...=rssnyt&emc=rssRegards,John

A:Personal Data Of 26.5 Million Veterans Stolen

I really wish both private and public organizations would start implementing strong encryption. If I hear about one more laptop or set of backup tapes going missing with millions of credit card or social security numbers I think I'm going to heave. NIST.org gets a lot of CIO / CISO visitors, I keep hoping they'll pay attention.Let them have the damn laptop, but protect the data.

Read other 1 answers
RELEVANCY SCORE 69.6

A new report shows that hackers from Russia have obtained login credentials for more than 272.3 million email accounts, which are now available for sale in Russia’s criminal underworld, a Most of them are Mail.ru accounts, though the list also includes smaller fractions of Google, Yahoo, and Microsoft email users.
 
After eliminating duplicates, Holden said he found 57 million Mail.ru accounts, which is an enormous number compared to the 64 million monthly users the service said it had late last year. The database includes tens of millions of credentials from Gmail (24 million), Microsoft (33 million), and Yahoo (40 million), and hundreds of thousands of accounts from German and Chinese email providers.
 
Thousands of stolen credentials belong to employees of some of the largest U.S. banks, manufacturing and retail companies, the firm revealed.
 

Article

A:Over 272 million email accounts stolen from Gmail, Microsoft, Yahoo

Is there any way yet to know if one's own details are amongst those lists? When these sort of things occur it would be useful for people to be able to know if they are affected. Is there any report yet of the form
"Only :
yahoo/
microsoft/
gmail/
...
users who were:
infected by .../
using ...as a password/
logged in on date .../
from the country .../
using passwords with no numbers in them/
...
have had their details caught up in this"?

Read other 3 answers
RELEVANCY SCORE 68

After confirming a few weeks ago that credit card details for more than 56 million customers were stolen by hackers who managed to breach Home Depot’s security system in a sophisticated Target-like manner, the retail store on Thursday also confirmed that as many as 53 million email addresses were also stolen by attackers, The New York Times reports.
 
Thus, in addition to being able to replicate credit cards using the stolen card info in order to steal money or place fraudulent orders, hackers might also use the massive email database to target unsuspecting users with various secondary phishing attacks. Specifically, hackers could send email messages containing links and/or attachments to fraudulent websites masquerading like real sites but meant to steal login user credentials for various services, including online banking services.
 

Article

Read other answers
RELEVANCY SCORE 68

July 15, Help Net Security ? (International) CNET attacked by Russian hackers, user database stolen. CBS Interactive confirmed that media Web site CNET was compromised after attackers claiming affiliation with the Russian hacker group W0rm stated that they were able to obtain databases containing usernames, emails, and encrypted passwords for over 1 million users. The attackers stated that they used a flaw in the site?s implementation of the Symfony PHP framework and claimed that the attack was performed for security demonstration purposes and the information would not be sold. Source: CNET attacked by Russian hackers, user database stolen

A:CNET attacked by Russian hackers, user database stolen

Whew!! I think!

Read other 4 answers
RELEVANCY SCORE 66.8

I was a member of an online dating site. I was kicked off and I don't know why. I always tried to comply with their rules and regulations. I tried contacting customer service to resolve the issue, but they have not replied. And I know many other previous members were kicked off and they don't know why either. So I tried to re-register. I know in the past the site would not allow members who were kicked off to re-register. So what you needed to do was obtain a different IP address, username, and e-mail address, and you would be able to get back on the site. I got a new IP address through one of the anonymous IP sites, and a new user name and e-mail address. I was able to get a new profile on the dating site, but in about an hour, I was kicked off again. So the site is obviously recognizing my identity by other means. And I need to repeat: I don't know why I was kicked off. I always attempted to obey their rules and regulation, and not be abusive to anyone. And the dating site is not informing me why my profile was deleted.
So my question is:
HOW IS THE DATING SITE IDENTIFYING ME AS A PREVIOUS MEMBER...AND...WHAT DO I HAVE TO DO TO GET ANOTHER PROFILE WITHOUT BEING IDENTIFIED AND KICKED OFF AGAIN?
 

A:Dating Site

we cannot assist with this, unfortunately. This is an issue you will have to take up with the site; I will say that by attempting to get around their restrictions, you may have made your case worse off.

Again, however, we cannot assist with this type of issue. This needs to be cleared with the site, regardless of whether or not they say they don't know what is going on. Closing thread.

thanks,

v
 

Read other 1 answers
RELEVANCY SCORE 66.8

Please can anybody help me with a free dating site............

A:Dating site

Try Church

Read other 2 answers
RELEVANCY SCORE 66.4

I just received an email from a friend inviting me to join a site. I was curious and clicked the link. My browsser - Firefox started and showed it was a dating site and that a friend wanted to have a chat. I tried to "X" out of the window but another message came up and holding my arrow over the choices I saw that either choosing yes or no would take me to their site and "X" ing brought up another message repeating a similar message. I got out with Control-Alt-Delete and used Task Manager to end the browser.

I thought that would end it but when I restarted Firefox a while later it came up with the Dating site window asking if I was male or female. Again I had no way to "get out" so used task manager again. When I started Firefox again, Firefox opened with a shutdown screen offerring me to use the Dating Site or restarting. I chose restarting and it was then OK.

I did check to see if the dating site had changed the browsers Home Page - It had not. But I will be doing an Adware scan and perhaps after such an experience I should use the browser to delete ALL cookies and history.

My reason to advise The Tech Support Guy site is to let everyone know of another site that is using very aggressive tactics. I would like to know where this site is taking me but if they are that aggressive on th opening page I don't need to risk my computer any further.

If I knew the site name I would post it..... or would I???
 

A:A dating Site took over Firefox - Who knows what its doing?

Read other 16 answers
RELEVANCY SCORE 66.4

I already received some offensive and rude responses when I tried to ask for help on another forum. Hopefully, someone can elaborate on the issues. I'm trying to use online dating and have encountered problems with multiple websites. For now, I want to discuss one site that is supposed to be "legit", claims they don't judge, and advertises like it has ties to media/public relations.

First of all, if this is relevant, I want to mention my computer is under surveillance including the microphone, it is tapped. I took a photo that was titled a response to a statement I said verbally a loud. Yes, everyone I know is confused because especially after a year, nobody has a clue why surveillance would be wasted on someone like me. I hope this doesn't pertain to the online dating issue, just thought I should mention and furthermore want to comment the individual never disclosed what field they worked in (hopefully it's legit) and I have not noticed a reduction in harassment online include forced religious material. I do not know the purpose.

As far as the dating site, when I register, it appears flooded with mass amounts of spam that is harassing in nature some of which includes personal references. I am allowed to online date and am unsure if this is something that an attorney needs to get involved with. On a side note, some of the harassment included threatening content that is not acceptable at all. Others seemed to act as if it was authorized to both violate terms o... Read more

A:Dating Site Problems?

security is the key here. points of note: be sure the AV and windows is fully updated. use a recommended antivirus program. avast free, or a paid, kaspersky to run scans. there are more but ...these are examples.

use a cleaner, such as, ccleaner free (well recommended) and use it to empty browser cache, etc. disable the camera and remove any private details within your account that may be seen publically.

use another email provider. to help with the amount of spam use a free mail washer:
Mailwasher Free Spam Filter Software: The Reliable Free Spam Blocker | MailWasher - Mailwasher Free

these are a few changes to harden your securities and to protect against malware.
hth

Read other 1 answers
RELEVANCY SCORE 66.4

I already received some offensive and rude responses when I tried to ask for help on another forum. Hopefully, someone can elaborate on the issues. I'm trying to use online dating and have encountered problems with multiple websites. For now, I want to discuss one site that is supposed to be "legit", claims they don't judge, and advertises like it has ties to media/public relations.

First of all, if this is relevant, I want to mention my computer is under surveillance including the microphone, it is tapped. I took a photo that was titled a response to a statement I said verbally a loud. Yes, everyone I know is confused because especially after a year, nobody has a clue why surveillance would be wasted on someone like me. I hope this doesn't pertain to the online dating issue, just thought I should mention and furthermore want to comment the individual never disclosed what field they worked in (hopefully it's legit) and I have not noticed a reduction in harassment online include forced religious material. I do not know the purpose.

As far as the dating site, when I register, it appears flooded with mass amounts of spam that is harassing in nature some of which includes personal references. I am allowed to online date and am unsure if this is something that an attorney needs to get involved with. On a side note, some of the harassment included threatening content that is not acceptable at all. Others seemed to act as if it was authorized to both violate terms o... Read more

A:Dating Site Problems?

security is the key here. points of note: be sure the AV and windows is fully updated. use a recommended antivirus program. avast free, or a paid, kaspersky to run scans. there are more but ...these are examples.

use a cleaner, such as, ccleaner free (well recommended) and use it to empty browser cache, etc. disable the camera and remove any private details within your account that may be seen publically.

use another email provider. to help with the amount of spam use a free mail washer:
Mailwasher Free Spam Filter Software: The Reliable Free Spam Blocker | MailWasher - Mailwasher Free

these are a few changes to harden your securities and to protect against malware.
hth

Read other 1 answers
RELEVANCY SCORE 65.6

Hi There,

I got an interesting question from a friend today. Apparently his wife found the site lovefinder.biz in his search history on his home computer. He's adamant that he's never visited the site and I believe him. I know that through pop-ups and browser hijacking viruses that it's possible he was redirected there unintentionally but that's not the main problem here.

His wife also checked his saved passwords in Firefox and found that there were 3 accounts saved for this lovefinder site. The funny thing is that the account names and passwords saved look like they've been randomly taken from the rest of his saved passwords list.

So the question is: Is it possible for a virus to access your Firefox saved passwords list and attempt to login to or create an account for a site? If not, what do you think happened here?

Thanks,
Corn

Read other answers
RELEVANCY SCORE 65.6

I posted this to the General Security forum but would now very much appreciate a HijackThis analysis so am re-posting here...

I received an email from a knowledgeable friend inviting me to join a site. Because this friend was internet wise I was curious and clicked the link. Firefox started and showed it was a dating site requesting signup. Wanting to “get out” I tried to "X" out of the message window but another message came up and holding my arrow over the choices I saw that either choosing yes or no would take me to their site and "X" ing brought up another message telling me to click continue if I wished to exit. I could not get out without entering the site! I used Control-Alt-Delete and Task Manager to exit the browser.

I thought that would end it but when I restarted Firefox a while later it came up with the same site asking if I was male or female. Again I had no way to "get out" so I used task manager to exit Firefox. When I started Firefox again, a Firefox window opened with its own shutdown screen offering me to restore the previous site or restart. I chose restart and it was then OK. And has been since.

I did check to see if the dating site had changed the browsers Home Page - It had not. I deleted history files and ran Adaware which found one cookie which I deleted. I ran Malwarebyte’s Anti-malware and it found nothing.

I did check with my friend and he advised he had his emails hijacked & apologized.

My reason to post th... Read more

Read other answers
RELEVANCY SCORE 61.6

How to force IE 11 to ask for saving credentials again for just one web site, after having accidentally sellect not to remember password for that particular site. Please, take into account that:


- I'm totally aware that storing credentials is not a good security practice, but in my particular case this is what I need to do.

- I know that reseting IE or similar approachs will do the job, but doing that I'll lost more tan 70 web sites credentials. I need a solution not involving loose all the web credentials stored.
- I also know that there is way to do the trick "lying" to IE using a modified but similar username, but this only works in some web sites, depending on the kind of login mechanism used. In my particulare case this trick also does not work.
- I also know that there was a registry hack for this particular problem, but this does not work with IE last versions.


Any help would be very apreciated.

Read other answers
RELEVANCY SCORE 60.4

a services.exe entry shows up in tcpviewer.I ran dss and hijackthis, log results pasted below.Deckard's System Scanner v20071014.68Run by Weajr on 2008-06-17 12:35:49Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --34: 2008-06-17 16:36:04 UTC - RP51 - Deckard's System Scanner Restore Point33: 2008-06-17 15:37:19 UTC - RP50 - System Checkpoint32: 2008-06-16 13:41:46 UTC - RP49 - System Checkpoint31: 2008-06-14 17:01:40 UTC - RP48 - Software Distribution Service 3.030: 2008-06-14 16:56:29 UTC - RP47 - Installed Windows Defender-- First Restore Point -- 1: 2008-05-15 12:50:31 UTC - RP18 - Configured Microsoft Office Enterprise 2007Backed up registry hives.Performed disk cleanup.Total Physical Memory: 256 MiB (512 MiB recommended).-- HijackThis (run as Weajr.exe) -----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:38:41 PM, on 6/17/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\syste... Read more

A:Pesking Tcp Service To Russian Site?

Hello devilgas. to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine)We apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.Thanks and again sorry for the delay.If you still would like help, please follow the following instructions: Please run Deckard's System Scanner again, this time using these instructions:(In the event you lost your copy, you can download a new one from here: Deckard's System Scanner)Click on Start, click on RunCopy and paste the following in the open window and then click OK:
"%userprofile%\desktop\dss.exe" /configThis will open up DSS configurationClick on Check All.Click Scan.
DSS will now run again.Please post back both logs that open in notepad.
Main.txt and Extra.txtNextPlease do an online scan with Kaspersky WebScanner.Please visit the Kaspersky Online Scanner website.
Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.Click on the Accept button and install any components it needs.The program will install and then begin downloading the latest definition files.After the files have been downloaded on the left side of the page in the Scan section sele... Read more

Read other 2 answers
RELEVANCY SCORE 60.4

Hello,
 
Recently, every time I boot my PC, a cmd window flashes briefly and then a site with russian text with many ads opens up. It has taken me to a site called gamesharbor(.)com and previously took me to another site but I did not check to see what that site was called. I am running Windows 8.1. I ran a malwarebytes scan which found 1 object if I remember correctly, but it still pops up so I know it wasn't removed. Any help would be greatly appreciated.

A:Russian Site Pops Up Every Boot

Hello,  Please run the following programme.  Autoruns
Please download Autoruns and save the file to your Desktop.
Right-Click Autoruns.exe and select  Run as administrator to run the programme.
Click Agree to End User Licence Agreement (EULA).
Allow the programme to scan. Once completed, click File, then Save, name the file Autoruns Log.arn and save to your Desktop. 
Close Autoruns.
Upload the log (Autoruns Log.arn) to my channel, here.

Read other 16 answers
RELEVANCY SCORE 60

We have a number of users where, when they change their network password, their Outlook will start prompting for the username and password.  This will happen every day until credential manager is cleared out. Then things go back to normal, until the
user has to change their password again.  It seems that once this problem happens this user will always have this problem.  The users are frustrated and is very vocal about how IT can't seem to fix the problem.  Any idea how to fix this permanently? 
Articles I have read say this is a known issue and there isn't a fix.  Office 2013 is the version.

Read other answers
RELEVANCY SCORE 60

Hi, I hope someone here can help me.

I've got a PC running WinXP SP3 (fully updated (until a few days ago)) which now refuses to connect to any Microsoft website. If I try it is hijacked to a (non-microsoft) site where the text appears to be all in Russian (though I can't tell what it is saying, not being able to understand Russian myself). Although it still shows "www.microsoft.com" in the address bar of IE8 (and Firefox), looking at the bottom of the IE8 window as the Russian site loads it seems that the data is actually coming from "map.sam5.ru".

I get the same problem if I try to connect to "www.malwarebytes.org" and "www.superantispyware.com" - both get hijacked to this russian site.

As far as I can tell, most other (i.e. non security related) websites are unaffected and load just as they always used to.

I have scanned the system with MalwareBytes, Microsoft Security Essentials and SuperAntisSpyware and none of them find anything they think needs fixing.

I've also run HiJackThis - here is the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:18:42, on 03/01/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32&... Read more

A:Please help - Microsoft and other websites hijacked to some russian site

Hello Mark , Welcome to Bleeping Computer.
My name is fireman4it and I will be helping you with your Malware problem.

Please take note of some guidelines for this fix:
Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
In the upper right hand corner of the topic you will see a button called Watch Topic.I suggest you click it and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

Finally, please reply using the ADD REPLY button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.1.Please download the latest version of TDSSKiller from here and save it to your Desktop.Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Put a checkmark beside loaded modules.
A reboot will be needed to apply the changes. Do it.TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is norma... Read more

Read other 7 answers
RELEVANCY SCORE 60

I know there are a lot of people here seem to have the same problem with me. I use firefox most of the time. First firefox tried to blocked pop up but after a couple times it seems to can't. Now it keeps redirect me to porn site, aviasales. There are also small pop up appear at the left corner in russian. And when I tried to load any websites they will tried to transfer data to some weird website that have nothing to do with the side I loading.  it affected more to some website but not all for example reddit, bleacher report, some web blog, but not with tumblr or google. oh and malwarebyte tried to blocked it too.
 
my english might not be good and my understanding in computer is kindda low but please help.

A:weird russian ad keep following me around and redirect me to porn site

Hello there    
 
I'm LighthouseParty and I'll be assisting you with your concern today. Let's run a couple of scans to see what could be causing this. Someone else is having the EXACT same problem as you are.. http://www.bleepingcomputer.com/forums/t/558631/russian-pop-up-virus/
   Download MiniToolBox
Click here to download MiniToolBox to your desktop.
Double click MiniToolBox.
Select the following and then press go.
Post the log in your next reply.
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Installed Programs
List Restore Points
   Install and run a scan with Malwarebytes Anti-Malware
Click here to download Malwarebytes to your desktop.
Double click mbam-setup-x.x.x.xxxx and follow the on-screen instructions.
On the dashboard, click update now.
After that, click scan now - the scan will now begin.
When the scan's completed, select apply actions - make sure the action is quarantine.
Restart your computer.
How to get the log.
On the dashboard, select the history tab and click application logs.
Select the log which has the time and date of when you did the scan.
Click copy to clipboard and paste it into your reply.
 Download Security Check
Click here to download Security Check to your desktop.
Double click SecurityCheck and follow the on-screen instructions.
A log should open, called checkup.txt.
Please post the contents of it in your next reply.
Thanks an... Read more

Read other 8 answers
RELEVANCY SCORE 60

I already post this in Am i infected? What do i do ? in another forum the other seem to have the same problem with me and Boopme suggest to do this
 
this is my original post link
http://www.bleepingcomputer.com/forums/t/558762/weird-russian-ad-keep-following-me-around-and-redirect-me-to-porn-site/
 
this is the link that Boopme suggest what to do
http://www.bleepingcomputer.com/forums/t/558631/russian-pop-up-virus/

 

A:weird russian ad keep following me around and redirect me to porn site

Sorry i did something wrong on copy process
 
this is a RSIT, DDS is unable to run
 
Logfile of random's system information tool 1.10 (written by random/random)
Run by acer-pc at 2014-12-06 01:57:39
Microsoft Windows 8.1 Pro
System drive C: has 119 GB (80%) free of 150 GB
Total RAM: 3905 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:57:40, on 6/12/2557
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\ThaiSoftware Enterprise\ThaiSoftware Dictionary\Bin\MagicLnk.exe
C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
C:\Users\acer-pc\Downloads\Programs\SecurityCheck.exe
C:\Program Files\trend micro\acer-p... Read more

Read other 25 answers
RELEVANCY SCORE 59.2

I supposed that wouldn't be so bad if I spoke Russian, but then again, there's not much writing... ;-) One of the exchange students spoke Russian, so I suspect that's when the "lovely" hijacking occurred. I think it's the "sexyque.com" items below. I've also seen "pretty.ru" on the browser window when it's redirected.

I've updated my Symantec virus software an hour ago, re-ran a scan, and that's clean.

Below is my Hijack This log. Please take a look at it and let me know what to do. Thanks!

Lori

Logfile of HijackThis v1.97.2
Scan saved at 9:29:55 PM, on 9/12/03
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSGLOOP.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\SYMANTEC\SAV8\RTVSCN95.EXE
C:\PROGRAM FILES\SYMANTEC\SAV8\DEFWATCH.EXE
C:\WINDOWS\SYSTEM\MSG32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\YDPDICT\WATCH.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\SYSTEM\3dmoused.exe
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\PROGRAM FILES\DELFIN\PROMULGATE\PGMONITR.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\SYMANTEC\SAV8\VPTRAY.EXE
C:\WINDOWS\Run... Read more

A:(Solved) My browser gets redirected to Russian porn site

Read other 10 answers
RELEVANCY SCORE 59.2

Upon startup, my internet browser (Google Chrome) opens by itself and opens a new tab redirecting it to a russian website "gameloft.name".
The website Has changed over 20 times while this problem has continued. With each change the adds around the body of the site change and the URL changes slightly.
 
My anti-virus (avast) never detected anything, also when the problem first arose I ran Malwarebytes, but it did not find any threats. Today I ran mbar, and did not find any threat's either.
 
Any Help Would be Greatly Appreciated.
 
mbar logs:
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.3.1001
 
© Malwarebytes Corporation 2011-2012
 
OS version: 6.1.7601 Windows 7 Service Pack 1 x64
 
Account is Administrative
 
Internet Explorer version: 8.0.7601.17514
 
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 3.199000 GHz
Memory total: 8526327808, free: 4876374016
 
Downloaded database version: v2016.02.24.07
Downloaded database version: v2016.02.17.01
Downloaded database version: v2016.02.22.02
Initializing...
=======================================
Driver version: 0.3.0.4
------------ Kernel report ------------
     02/24/2016 14:30:25
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\sy... Read more

A:On startup, browser opening new tab and redirecting to Russian site

Greetings Zandaa and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems... Read more

Read other 17 answers
RELEVANCY SCORE 59.2

My IE11 is somehow hijacked by Yandex
Here's the symptoms:
 
1. I type in "https://mail.google.com/" and get re-directed to https://www.google.com/intl/uk/mail/help/about.html
 
2. When I to a internet-advance-reset' and check delete personal settings my browser sets yandex.ru as the default browser.
 
I have tried Malwarebytes and other malware programs with no success.  There are all kinds of sites suggesting different fixes that do not work, and that led me here.
 
This isn't the end of the world, but very irritating.  At this point, I'm more interested in finding out what the issues is than anything else.
 
Thanks in advance for the suggestions.
 
Attached are some logs.

Read other answers
RELEVANCY SCORE 52.8

i have a acer laptop bought in Russia
the keyboard is russian

the hdd failed

trying to reload 8.1 home pro even 10
all ask for license key

is licensing zone specific?
will i need to get a russian 8.1 setup disk?
can i just create one from the media creation tool?
 

Read other answers
RELEVANCY SCORE 50.4

Environment: Win7 SP1, Domain Controller/File Sever w/Server 2012 R2, Office 365
 
I have 3 workstations at a client site with this issue (2x Office 2016, 1x Office 2010).  It started with one PC, then a second started having the issue a month or so later, followed by a third after a few more months.  At this time, there are 5 other PCs on site that are working fine.  For the affected PCs, as long as you're logged in, there is no password prompt.  If you log out & log back in (or restart and log back in), there is no password prompt.  If you turn off the PC, turn it back on and log in immediately, there is no password prompt.  It's only if the PC is on while you're logged out for 20-30 min.  Then you will be prompted the next time you log in.  I don't see anything in Event Viewer that would indicate why this is happening.
 
Client logs out each night and in each morning and thus is prompted to sign into OneDrive and Outlook.  I've tried deleting all credentials from Credentials Manager, creating new Outlook profiles, running Outlook in safe mode, flushing/reregistering DNS, creating new Windows profiles, repairing/reinstalling Office, sfc, even a couple registry edits I found online, checked for viruses/malware, I've changed O365 passwords and Windows account passwords, I even completely reinstalled Windows on the first PC and the problem still occurs.  (some of these steps don't make sense because it was before ... Read more

A:Credentials Manager deletes all credentials if logged out for 30 minutes

Well you basically done what i would have done so far but what autodiscover address are you using, i would make sure its country specific.
Pinging autodiscover should reply with your DNS entry, also did the company ever have exchange on the domain? If so i would clean up in ADSI Edit.
 
I guess you have tried using Cache on & off in outlook? Make sure there is no GPO which deletes credentials after 30minutes.
Are you also using ADSync to syn credentials to O365?

Read other answers
RELEVANCY SCORE 48.4

My hp pavilion was stolen, didn't remember the serial number or anything that much but I got it registered pls I need it tracked or tagged stolen

A:I need my stolen hp pavilion tracked or tagged stolen

Ralph117 I wish I had good news for you -- but I don't ... Sorry, but this is only a community forum staffed by volunteers and we can do nothing to track or recover missing property.What I recommend is the following:1) Contact HP Customer Support, tell them about the stolen laptop, and get a case numberIf you live in the US or Canada, contact information is on this page: http://www8.hp.com/us/en/contact-hp/phone-assist.html#section1If you live elsewhere, contact information is on this page: http://www8.hp.com/us/en/contact-hp/ww-contact-us.htmlNOTE: After you get through, stay on the line until you are finally able to talk to some one -- it can take a while!2) Contact the local law enforcement authorities about the theft -- provide them all the information they need and show them proof of ownership. You will most likely need to this to have then return the laptop to you if they find it3) When the laptop is returned, contact Absolute Software to see about getting Lojack for Laptops for it. That enables you to report a stolen laptop and then locate it, once it is then connected to the Internet.Good Luck

Read other 1 answers
RELEVANCY SCORE 47.2

Whenever i try to log on to my work server using remote desktop on windows 7, i get the above message (with xx.xxx.xxx.xx being the servers IP adress), no matter what i try. I have allowed connections from computers running any version of remote desktop in control panel -> system and security ->allow remote access, but to no avail. I have also tried using the domain name instead of the IP, but it still wont work. I can access the server from my XP machine, so the problem must be on the windows 7 machine somewhere. I hope you can help me.

A:Windows 7 Remote Desktop says: "The credentials that were used to connect to xx.xxx.xxx.xx did not work. Please enter new credentials".

Hi,
 
I suggest you create a new admin account and login on the machine with new created account to check the result. If the issue persists, please restart the machine with the original user account and collect the following log file for research.
 
Collect Event log
=========================
a. Click "Start", input "eventvwr" (without quotation marks) in the Start Search bar and press Enter.
b. Right click on "Application" on the left frame, choose "Save Log file As"; in the pop-up window, click to choose the Desktop icon on the left frame, input "app" in the "File name" blank, and then click save.
c. Right click on "System", with the same method, save it as "sys".
d. Locate the two saved log files on the Desktop and upload it.
 
Thanks,
Novak

Read other 28 answers
RELEVANCY SCORE 42.8

Where is the best place to go online to get ram updates. that will show you how to update.
Craig

A:up dating Ram

To purchase RAM you can try Tiger Direct or Newegg if you're in the US. I'm sure there are tons of videos online about how to replace memory and I would guess sites like Crucial or Corsair would have info on installation as well.

RAM Memory Upgrade: Dell, Mac, Apple, HP, Compaq. USB drives, flash cards, SSD at Crucial.com

Read other 2 answers
RELEVANCY SCORE 42.4

I CAN'T UPDATE MY COMPUTER & WORRY ABOUT MY SECURTY

Read other answers
RELEVANCY SCORE 42.4

Any ideas how I can stop Word changing autocorrect options I have set? I remove the auto lists, heading, etc. and save the document to normal.dot. I also remove the check against allow start up in reading mode. The next time I boot up, Word has gone back to the old settings.
 

A:Word - self up-dating

Read other 7 answers
RELEVANCY SCORE 42.4

who else would i ask ? i have been on a few dating sites and i notice girls want my yahoo im info , or for me to text them i'm reluctant as i dont want my computer or my phone at risk am i missing out by not giveing im info or are they wanting info so they can abuse it.
 

A:i m dating scam?

YES you are missing out. You are missing out on all the Nigerian princesess. . The Russian brides scams. You are also missing out on the Asian marriage scammers. There may be a few genuine women on those sites but but but BE carefull you dont need to give her all your details eg Cell phone number. Try skype for the first few chats then go from there. Genuine women will welcome the caution from you and they will be cautious as well.
 
IF THEY ASK FOR MONEY no matter how small the ammount cut all comunication with them at once.
They may try the my mother /father/child is sick need money for medical bills or the yes I love you send me money for a airline ticket scam DON'T DO IT. Same applies for any Local women you meet.
DO NOT BE A SUCKER FOR A SOB STORY, A genuine woman who is intrested in you will never ask for money.
 
NO YOU ARE NOT MISSING OUT.
 
A word to the wise. Most of those dating sites are a scam that will cost you BIG$$$$ bucks in the end. Try joining a social club, Or start 1 in your area for people in the same boat as you.
 
Looking at your photo you seem a normal sort of guy prehaps you just need some self confidance, Just remember this every time you approach a woman and she says no you are 1 woman closer to the 1 that says yes. Also women who are impressed by BLING eg money, cars etc are not worth the hassle, You need to ask yourself this, Is she intrested in me OR my 50,000 dollar car nice house/appartment etc.
 
Well thats my 2 cents... Read more

Read other 4 answers
RELEVANCY SCORE 42

When I type 6-23 in a cell it is converted to read:
23 Jun. How do I turn this feature off. I want the cell to
read 6-23.
 

A:Excel auto dating

Read other 6 answers
RELEVANCY SCORE 42

Hi,

How can i back date my windows xp pro machine to the year 1975....is there a way to do it...i can only take back the date till 1980...
 

A:Back dating my Machine

Read other 8 answers
RELEVANCY SCORE 42

Hi...Somebody used my computer unauthorised and used 70% of my monthly usage in a few hours ...Now I have found in IE History entries that appear to indicate that somebody has been watching HD video trailers and I presume this has resulted in the loss of my usage....BUT to be sure I want to date the History entries ....they are in "the last 7 days" and I have tryed everything but I cannot find a date just to confirm my suspicion ..

Are Internet Explorer History entries able to be dated....Thanks for any help.HK

Read other answers
RELEVANCY SCORE 42

Hi guys.

As you can see from my thread title, I quite frequently get messages from unknown people (most probably spam, as their emails are just random letters) talking about going to dating sites and such. An example of a message would be this:

wqwkoctz says:
Hi, i waited for you the other day so we could chat, anyway
can you visit me at my website so i can show u a few things

http://findahotdate.net
I did not, and will not click the links, as they are most probably adware/malware filled, but I was wondering if anybody knew how to tackle this problem?

Regards,
poopehz
 

A:Random MSN Dating Messages

Read other 6 answers
RELEVANCY SCORE 41.6

Hi ,hope that sombody can help. Untill now I have always been able to solve problems by this with mailware tools og just going thorough the registry. But now I need help from supernurds :-)
Done Adware
Done Spybot
Done symantec adaware
Have firewale
Have windwos defendrer and done that
But my browser keeps beeing hijact to sites like dating services, casinos and stuff.
Here is my logg:
Logfile of HijackThis v1.99.1
Scan saved at 03:05:58, on 12/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIET
This is the logg file from HijackThis (hope that sombody can tell me what is the problem)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Novell\XTAgent.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Canon\BJCard\Bjmcmng.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Novell\ZENworks\nalntsrv.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\WZCBDL Service\WZCBDLS.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe... Read more

A:BrowserHijack to dating and gamling sites

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately.

Since it has been a few days since you first posted, please post a fresh HijackThis Log if you still need assistance.

Thank you.

Read other 1 answers
RELEVANCY SCORE 41.6

I have ran Microsoft Antispyware and Norton Antivirus and removed all infections. Here is my Log file from Highjack This. If anyone can help it would greatly be appreciated.Thanks!!Logfile of HijackThis v1.99.1Scan saved at 1:51:32 PM, on 12/9/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\SCardSvr.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\System32\Parclass.exeC:\WINDOWS\System32\ppmon.exeC:\WINDOWS\System32\cisvc.exeC:\Program Files\Compaq�... Read more

A:Gaming, Dating, Etc Shortcut Bar On Desktop

You may want to print out these instructions for reference, since you will have to restart your computer during the fix. Please download FixWareout from one of these sites: http://forums.subratam.org/index.php?act=A...e=post&id=43811 http://swandog46.geekstogo.com/Fixwareout.exe Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal. When your system reboots, follow the prompts. Afterwards, HijackThis will launch. Please click Scan, and check the following items: O17 - HKLM\System\CCS\Services\Tcpip\..\{0CBEADFC-F8D9-4807-98E1-2DB06DF06C92}: NameServer = 85.255.115.30,85.255.112.153O17 - HKLM\System\CCS\Services\Tcpip\..\{11FE4206-2F18-4102-80DD-22D097B3C5B0}: NameServer = 85.255.115.30,85.255.112.153O17 - HKLM\System\CCS\Services\Tcpip\..\{5D0F5A18-EE29-4BF5-AACC-3FF050EC40FC}: NameServer = 85.255.115.30,85.255.112.153O17 - HKLM\System\CS1\Services\Tcpip\..\{0CBEADFC-F8D9-4807-98E1-2DB06DF06C92}: NameServer = 85.255.115.30,85.255.112.153Click Fix Checked. Close HijackThis, and click OK to proceed. At the end of the fix, you may need to restart your computer again. Finally, please post the contents of the logfile C:\f... Read more

Read other 3 answers
RELEVANCY SCORE 41.6

Windows XP

Very much a beginner on computors.

Received an e-mail from Norton that antivirus subscription was running out, Oct. 26, and I needed to update.

When I click button to do so, am ask if I want to update or upgrade. Which should I do?
Also was ask if I wanted to download or in the box?
Was thinking of buying locally and installing. If I do that will I have to delete the old copy first?
Told you I was a beginner....

Checked to see which version of Norton I have and got the following:
2000-2002
version 8.07.17c
Norton antivirus ( OEM) for Dell ( 90)

Thanks in advance....
 

A:up dating anti virus program

Read other 15 answers
RELEVANCY SCORE 41.6

I had a hard drive failure on my XP system, managed to recover nearly all the data and the orginal folder structure sits on my E: on my new Windows 7 system. I was very impressed with Windows 7 when I installed it - better than expected.

Now, I want to transfer many of my settings across to Windows 7. e.g. documents, Firefox and Skype history and contacts etc.

I see the structure is different for Windows 7. Any recommendations or advice on where my previous My Documents stuff should go? Or any other advice?

Thanks,

Jon

A:Migrating dating from old XP hard drive

I always google how to move Firefox Favorites, Skype contacts, Windows Mail, data to a new computer to get the quick solution.

I never transfer settings over because they are a corruption path. Best to start fresh.

Your files can be dragged individually or as a group into the corresponding User folder in the Explorer bar on the left side of each Explorer window. Don't release the left click until the bar stops expanding and the hypertext confirms where you're dropping them is correct.

Read other 4 answers
RELEVANCY SCORE 41.6

Last Saturday night, I downloaded a small .exe file and ran it, thinking the worst that would happen was some spyware I had to clean out. Little did I realize how difficult some cleaning could be!

Over the next day or so, two things began happening with great frequency: At seemingly random intervals while using Firefox, I.E. windows would popup with random dating sites/typical adware stuff.

Secondly, also at seemingly random intervals, my computer would lock up in a strange manner: The mouse would become an hourglass and not allow me to interact with anything, even though I could clearly see the computer still working (Music would still play, my internet connection would continue to flash. Ctrl+alt+del would pop up, but then refuse to allow me to click anything, and simply pressing enter seemed to have no effect. Pressing the power button caused everything to close as normal before shutting down.

Finally, I received a popup for SystemDoctor after another day, and it tried to install itself onto my computer. I cancelled out of the installation, and searched around on the internet. I came to a site (not this one) that taught me how to use SmitFraudFix and HJT to remove it. I ran SmitFraudFix in safe mode and cleared out a bunch of stuff, and then ran HJT and found no trace of the 6 or so SystemDoctor2006 items I was instructed to delete (no surprise to me, as I thought I hadn't allowed SystemDoctor to install). I considered the matter closed (and unfortunately deleted ... Read more

A:SystemDoctor, ErrorProtector, and dating Adware

Just an update: I downloaded and ran SuperAntiSpyware, which killed about 53 things, including a few things labeled as 'Vundo'. Seeing that, I re-ran Vundo, which rebooted to delete two more items:

VundoFix V6.5.8

Checking Java version...

Scan started at 8:19:00 PM 9/13/2007

Listing files found while scanning....

C:\windows\system32\qbklpmly.dll
C:\WINDOWS\system32\ylmplkbq.ini

Beginning removal...

Attempting to delete C:\windows\system32\qbklpmly.dll
C:\windows\system32\qbklpmly.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ylmplkbq.ini
C:\WINDOWS\system32\ylmplkbq.ini Has been deleted!

Performing Repairs to the registry.
Done!


Here's what my HJT log looks like at present: notice that the first item has disappeared (much to my pleasure).

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:26:25 PM, on 9/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\PCI Latency Tool... Read more

Read other 3 answers
RELEVANCY SCORE 41.6

Please help. I am getting constant popups like sexsearch.com, adultfriendfinder.com, mylife.com and other sex and dating related website popups. While away on vacation my sister was using my computer so i am unsure how this malware or virus entered.

here is my latest Hijackthis Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:14:26 AM, on 01/09/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet... Read more

A:Constant Popups of dating and sex sites

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 41.6

Any help is greatly appreciated.

I just got this PC from a friend that is in excellent condition.

It is an older Intel but Intel coding is cryptic and I am trying to figure out the manufacture date or time period. The processor is an Evergreen 180MHz (I don't know if this is original from Intel or not). The mobo says "CA 645498-201" and "PBA644493-225". It also has orange label with barcode "M01874481". It has 128MB ram.

The information I can see says

10267-01 REV. A/- MODEL 51639
SHIFT 1 BERMO 95-52

The only thing I could think of was "52" week of 19"95"? The computer was very dusty and filthy inside and everything appears original.

I googled 51639 but didn't really find anything obvious.

Does anyone know anything or sites about older Intel machines?
 

A:Solved: Need help dating (rare) Intel PC

Read other 6 answers
RELEVANCY SCORE 41.6

I have run SpyBot, AdAware SE, CWShredder and a variety of other recommended programs by your posters. I still have the problem. First, I have no problems indicated until IE is loaded...then I get a trojan flag from AVG which I heal (iecust.exe)...then I get popups for Strip Poker when IE is not running and security warnings. When browsing, I get strange pages from time to time.

My Hijack This log follows. Any help that can be provided will be sincerely appreciated.

Logfile of HijackThis v1.98.2
Scan saved at 1:22:03 PM, on 12/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\RDS\RsiSvc.exe
C:\Program Files\RDS\srscandr.exe
C:\Program Files\RDS\SOption.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\RDS\ddsschednt.exe
C:\Program Files\RDS\dds.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\RDS\spooler.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe... Read more

A:Adult, dating and security popups

Hi and Welcome to TSF

Before attacking an adware/spyware problem with hijackthis make sure you have already run ad-aware SE with VX2 add-on cleaner, Spybot Search & Destroy (with updated database) and CWShredder as these programs will clean a lot of the crap out first. All links to programs are in my signature. Ok..on to the log?..


Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also. Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore.

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn't be but make sure)

C:\WINDOWS\System32\pingnet.exe
C:\WINDOWS\System32\odcfg.exe
C:\WINDOWS\System32\getdns.exe

Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)

O1 - Hosts: 64.91.255.87 www.dcsresearch.com

Delete the following Files/Folders in RED (delete folders if no filename is specified or they are RED) according to their directory (If you can't find them...do a search for them?make sure you have search hidden files, folders, sub directorys..ect enabled if it applys to your... Read more

Read other 1 answers
RELEVANCY SCORE 41.6

Hi, I'm trying to do a system restore on my Dell Dimension 4700. I'm running woindows XP of course. It is only showing Jan. 2008, It will not go back any farther. My computer errored about a month ago, and a chkdsk was done, it seemed to not restart so the person tried to boot from disk. Somehow,? the OS was reinstalled so I am getting glitches in certain areas. Such as system restore, and my flashdrive not showing up. I thought that a system restore back about 2 months may solve my problems but I can't get there. Any ideas?
Thanks, Waverly.

A:System Restore Not Back Dating

It sounds like you had a hard crash then someone tried a repair disk reinstall of XP, often that does not work, your restore points would be wiped out by the repair?

Sooner or later it's better to just start over from scratch, I have wasted countless hours trying to fix hoplessly corrupted XP computers and repair disk was just a waste of time, it does work some of the time.

You might want to do some hardware diagnostics and rule out a bad hard drive or memory

Read other 3 answers
RELEVANCY SCORE 41.6

I am using an Excel timesheet for our bi-weekly payroll. I have the timesheet created, however none of us can recall how to make the pay period dates auto fill in the cell that refers to that. I know the formula contained a reference to the dates plus 12, but thats all I can recall. I need to get this completed in the next week, can anyone help figure this out?

Pay Period # 1 for 2011 will begin December 27, 2010 and end January 7th 2011. I want each timesheet for all subsequent pay periods to auto load the correct pay period dates on each individual timesheet.

How do I set this up to go forth?? Thanks for all the help.
 

A:Excel timesheet dating problem

Grannybanny

Welcome to the forum.
For your question:
Begin pay Period #1 on Sunday December 26, 2010 and end it on Saturday January 8, 2011
For pay period #2, add 14 days to the beginning date and 14 days to ending date of period #1
Keep adding 14 days to beginning and ending dates to have biweekly pay periods.
Even though you don't work Saturday or Sunday, they must be accounted for to have biweekly dates.
Good luck
 

Read other 2 answers