Over 1 million tech questions and answers.

Strange outgoing requests

Q: Strange outgoing requests

My firewwall is getting strange outgoing requests for net access from a Temp folder. I have run scans and have cleaned out temporary files but somehow something keeps trying to send data out.Log followsLogfile of Trend Micro HijackThis v2.0.2Scan saved at 16:06, on 2008-10-19Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\nvraidservice.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Active SMART\ActiveSMART.exeC:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exeC:\Program Files\Windows Live\Messenger\MsnMsgr.ExeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Logitech\SetPoint\SetPoint.exeC:\Program Files\Logitech\SetPoint II\SetpointII.exeC:\WINDOWS\system32\WTablet\TabUserW.exeC:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXEC:\Program Files\Active SMART\ASmartService.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\PnkBstrA.exeC:\Program Files\Trend Micro\Internet Security\SfCtlCom.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Tablet.exeC:\Program Files\Pure Networks\Network Magic\nmsrvc.exeC:\Program Files\Trend Micro\BM\TMBMSRV.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exeC:\Program Files\Trend Micro\Internet Security\TmProxy.exeC:\Program Files\Windows Live\Messenger\usnsvc.exeD:\Games\Steam\Steam.exeC:\Program Files\Opera\Opera.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\system32\cmd.exeC:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXEC:\Documents and Settings\Owner\Desktop\HijackThis\HiJackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1:80N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/"); (C:\Documents and Settings\OWNER\Application Data\Mozilla\Profiles\default\uxhzsn7q.slt\prefs.js)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNCO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXEO4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startupO4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [ActiveSMART] C:\Program Files\Active SMART\\ActiveSMART.exeO4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exeO4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXEO4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quietO4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O4 - Startup: Active SMART.lnk = C:\Program Files\Active SMART\ActiveSMART.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exeO4 - Global Startup: SetPointII.lnk = ?O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exeO15 - Trusted Zone: http://download.windowsupdate.comO16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1184332739421O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dllO22 - SharedTaskScheduler: astral - {5f938c17-fbc7-4a3c-8526-85e5b1a1f762} - (no file)O23 - Service: ActiveSMART Service - Ariolic Software, Ltd. (http://www.ariolic.com) - C:\Program Files\Active SMART\ASmartService.exeO23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe (file missing)O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exeO23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exeO23 - Service: Pure Networks Network Magic Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\nmsrvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe (file missing)O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exeO23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exeO23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exeO23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exeO23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exeO23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe--End of file - 8301 bytesHope you can help.

RELEVANCY SCORE 200
Preferred Solution: Strange outgoing requests

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Strange outgoing requests

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dllhttp://www.bleepingcomputer.com/startups/c....dll-21047.htmlhttp://www.sophos.com/security/analyses/vi...ojagentgjr.htmlSince malware can change quickly, if you still have issues, please describe the symptoms, include any error messages word for word and a fresh HJT log.Thanks

Read other 7 answers
RELEVANCY SCORE 66

Our office has an ASUS netbook that gets passed around to who ever needs it (read as "no accountability!" )
Sort of the red-headed stepchild.
 
This morning, it landed on my desk with the suggestion that something might be not-ok with it....
Seem our little orphan has managed to contract the equivalent of an IT STD, with many partners, and no one 'fessing up to being the one responsible.
 
Regardless of who caused the problem, at this point, I'd have to very much agree we have one.
The netbook boots and runs slowly (even for its usual low speeds).
Searches in Internet Explorer and Chrome on google and bing are redirected to unrelated sites.
The SEARCH RESULTS themselves show up on the search engine page - its what comes up when you click through that's the problem.
 
In the course of locking things down and trying to figure out what's going on, I installed malwarebytes and Avast. Neither detected any malware or problem in complete scans. However, both are picking up repeated malicious outgoing website connection requests.
MWB gives a pop-up with the IP address (which has included 68.57.188.235, 195.3.145.57 and 89.28.7.139, if they mean anything to anyone.).
 
Avast flags the connection via its network shield notification, with a very long url, and ID'ing the process as C/Windows/system32/svchost.exe
 
The netbook is running Windows XP sp3, and in checking the Security Center, the firewall and auto updating have been turned off. When I try to cli... Read more

A:Unknown Infection - Malicious outgoing IP requests,pop-ups,search redirects

Good evening. Given what you have posted my best advice to you is to reformat and reinstall Windows and then put in place some better PC security for the future - it's what I would do. There are various reasons for this: Given the lack of ownership of the machine there is unlikely to have been any serious concern about security - not my machine, not my problem. I don't know what anti-virus program(s) have been on the machine in the past, but i'd be surprised if they were kept up to date and regular scans run.Added to that is one of the browsers that is being used - IE8. It is a touch out of date by about two and a quarter years and is likely to have enough security holes that can be exploited to keep malware writers happy until Christmas next year, at least.The ease with which malware can get onboard, both in terms of ways on and lack of effective blocking, makes diagnosis and resolution difficult and there are no guarantees that all will be well at the end of the process. A fresh start is quicker and more reliable. Next, the "phone home" contacts that you have listed are a major concern. You can check the locations associated with the IP addresses here. For example, 195.3.145.57 resolves to Latvia, which isn't what you want to see, unless you have relatives there!The worry here is that there is some sort of backdoor on your machine which could have allowed someone on the other end of that connection to download any files that they chose as effectively as if they ha... Read more

Read other 4 answers
RELEVANCY SCORE 65.6

Hey all. Here's my problems
In Zune Software, I can't login to the marketplace/social
In Twhirl (a twitter client) I can't login to receive my feeds
In Picasa (A Photo Managing Software) I can't login to upload photos to a web album
When I try to sync the time server, it can't connect
When I plug in new hardware, Window's can't connect to find drivers
And Lastly, when using Windows Update, I get an infamous '80072EE2' error

So, in short, SOME of my programs keep having their outgoing requests or connections blocked. My internet works fine. When I play games it connects just fine. When I use and IM client it works fine. But for these programs...not so much.

And the worst thing about it is that it's effecting more programs. Picasa and Twhirl we're working last week shortly after I installed Windows 7

Anyways, I've tried a bunch of stuff already:
Disabling Windows Firewall, Enabling it with the specific programs allowed through, disabling anitvirus in addtion to firewall, switich the firewall programs, telling IE to auto-detect my proxy (I have none), going thru cmd prompt and resetting the proxy (still don't have one), system restoring to when I first installed the beta (when Twhirl and Picasa worked) only to have them stop working

Oh, and I connect to my network wirelessly through a Linksys USB-G receiver, which gets the signal from a Netgear router, which is hooked up to a cable modem

So, to say the least, I'm stumped. And if ANYONE could help me out here, it would... Read more

A:Outgoing Requests Blocked on Various Programs (Inc. Windows Update, Zune, Picasa...)

I'm able to login to the Zune marketplace and download podcasts/music etc. Do you have the latest version of the Zune software?

However, I haven't been able to get my Zune to sync. I tried running the program in Vista compatibility mode. No luck. Can't find any info on getting it to work.

Read other 6 answers
RELEVANCY SCORE 57.6

I logged into MSN messenger tonight and had two people asking to be accepted on my friends list. I have never heard of either of them. Niko Lo Mas Mejor...[email protected]....and Liefde Is Een Plek Waar Je Niet Kan Krabben...[email protected].. Oh maybe I should have not put their e-mail addys on here because a bot may pick them up. Bad me. I suspect there intentions were not good. Anyone had a similar experience lately?
 

A:Strange Requests on Messenger

It could of been someone who found you on MSN's directory, but odds are those are in fact bots. I would ignore them.
 

Read other 1 answers
RELEVANCY SCORE 57.6

I recently got 3 firewall requests from these pieces of windows software:explorer.exedllhost.exeruntimebroker.exe all 3 originating from their proper folders. Why are they requesting firewall access?

A:Strange Firewall requests

Can you tell us what firewall access these processes requested exactly?

Read other 2 answers
RELEVANCY SCORE 57.6

I recently got 3 firewall requests from these pieces of windows software:explorer.exedllhost.exeruntimebroker.exe all 3 originating from their proper folders. Why are they requesting firewall access?

A:Strange Firewall requests

Can you tell us what firewall access these processes requested exactly?

Read other 2 answers
RELEVANCY SCORE 56.8

Hi.
 
I help run a network, and have noticed a number of users devices hitting strange URLs - one for example is pasted below. All appear in the same format with a static IP and an encoded path. 
 
http://198.11.189.91/X%8E%5Ci%DF%1E%90%B4%A6%E4%02%5B%A3%D5%AC%A5%8C%11%BCOm%AB%0C%B5%B6%E1%08:%A5;h%B9%B2%06%BE%O%12i%FD%A6%87%D6%D3
 
For all of the URLs I've checked, they all seem to be operating a web server on port 2080, which is "Powered by wjas". I haven't found any useful information about this sort of web server

# curl http://198.11.189.91
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<h1>403 Forbidden</h1>
<p>You don't have permission to access the URL on this server. Sorry for the inconvenience.<br/>
Please report this message and include the following information to us.<br/>
Thank you very much!</p>
<table>
<tr>
<td>URL:</td>
<td>http://198.11.189.91:2080/</td>
</tr>
<tr>
<td>Server:</td>
<td>aserver010103188140.et2</td>
</tr>
<tr>
<td>Date:</td>
<td>2016/09/20 19:33:57</td>
</tr>
</table>
<hr/>Powered by wjas</body>
</html>
Does anyone have any information about what type of server these clients are connecting to, or what the data is in the encoded str... Read more

Read other answers
RELEVANCY SCORE 56.4

I have the Zone Alarm firewall and I have been getting outgoing requests to IP sites that I have blocked since I do not think that these are good sites.

A few months ago I was somehow infected by a Smitfraud trojan and I blocked all sites mentioned in bulletins as those that this trojan might call. I still get outbound requests to some of these sites. I may have been infected by other trojans as well....sites that I have blocked too. (Cadux family perhaps??)

The sites in question are realsearch.cc, www.nymex.com (I may have been infected by a unvise32.exe trojan variant), www.topadwarereviews.com, ecjnoe3inwe.com, among others. Zone alarm allows you to put in a web address and find the IP address.

I have tried to protect my computer as much as possible. I put on IE-Spy-Ad, SpyBot, SpyBlaster, and I try to use Firefox. I previously had Norton Internet Security and I now use a different Antivirus program. I have done numerous online scans Panda (Activescan2, nanoscan), BitDefender, Kaspersky, Trend-Micro among others and my computer seems clean at present.

How can I find out what is triggering these outbound requests so that I can put a stop to it.. Somehow I must have gotton a file, trojan, or registry key that has activated this behavior.

I have traced the outbound IP address from my Zone alarm log (program log). Is the IP address necessarily bad or could another computer be accessing mine through using those IP addresses?

Please advise!! Thank you.
 

A:Strange Outbound IP Requests Blocked by Firewall

Maybe you should post a HJT log.
 

Read other 3 answers
RELEVANCY SCORE 56.4

Can log onto my ISP but then my IE6 won't open. Instead I'm getting download request windows - one refers to a missing file sp something or other. Tried reloading my netzero software since it links with IE but it isn't listed in the add/remove software list and if I try to just delete the file it says its write protected. Uninstall icon doesn't work either - says it can't find the file.

Here's my HJT log:

Logfile of HijackThis v1.99.0
Scan saved at 11:57:37 AM, on 12/29/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet v series\FRU\Remind32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us7.hpwis.com/
R1 -... Read more

A:Can't access browser - getting strange download requests instead

I would suggest downloading Ad-Aware and Spybot Search & Destroy
Lifted this from $teve...follow these directions with these programs and repost a HJT log after you finish

Before you scan with AdAware, check for updates of the reference file by using the "webupdate".
Then ........

Make sure the following settings are made and on -------"ON=GREEN"
From main window :Click "Start" then " Activate in-depth scan"

Then......

Click "Use custom scanning options>Customize" and have these options on: "Scan within archives" ,"Scan active processes","Scan registry", "Deep scan registry" ,"Scan my IE Favorites for banned URL" and "Scan my host-files"

Then.........

Go to settings(the gear on top of AdAware)>Tweak>Scanning engine and tick "Unload recognized processes during scanning" and "Let windows remove files in use at next reboot"

Then...... click "proceed" to save your settings.

Now to scan itīs just to click the "Scan" button.

When scan is finished mark everything for removal and get rid of it.(Right-click the window and choose"select all" from the drop down menu)
Now re-boot...

Then
Search & Destroy

After installing, first press Online, and search for, put a check mark at, and install all updates.
Next, close all Internet Explorer and OE windows, hit 'Check for Problems', and have ... Read more

Read other 3 answers
RELEVANCY SCORE 55.6

Hello,I use Windows XP and Firefox is my default browser. Google searches have been redirecting to random sites.Also, since I have AVG (Free) firewall installed, I am getting unusual requests from new exe files to connect to the internet.I am attaching DDS and GMER logs with this post. Any help is appreciated.Thanks in advance.El Guapo.

A:Google/Firefox redirects, strange exe sending n/w requests

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 17 answers
RELEVANCY SCORE 55.6

First I want to say that I've scanned my computer with my antivirus software and used two online virus scanners and my computer is clean. I've also scanned it with spyware/adware programs such as Ad-Aware and a few online spyware scanners and my computer is clean. I have a firewall properly installed/configured and have had no security problems at all recently.

The problem started around Feb. 10 when I discovered that svchost.exe tries to make outgoing connections to download.microsoft.co (64.215.169.168) every 10 minutes on TCP port 80. I've had svchost blocked by firewall for the past three years and I've never had any problems doing that until Feb. 10. I have Automatic Windows Updates set to disabled/manual as I like to install the updates myself so I know exactly what's going on. In those cases I allow svchost to connect to Microsoft. It appears that the IP address belongs to Global Crossing and not Microsoft which makes me very suspicious. It's also tried making outgoing connections to c7.zedo.com.

I can't figure out why all of a sudden svchost is trying to make this connection and if it's legitimate. It may be no big deal but I'd still like to know what's going on. Does anyone have any ideas?

Last year around this time, svchost was trying to make connections to time.windows.com but the IP address did not belong to Microsoft.
 

Read other answers
RELEVANCY SCORE 54.4

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 10 Home, 64 bit
Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 4010 Mb
Graphics Card: Intel(R) HD Graphics 3000, 1813 Mb
Hard Drives: C: 582 GB (508 GB Free); D: 13 GB (7 GB Free);
Motherboard: Dell Inc.,
Antivirus: Windows Defender, Enabled and Updated
Most of my outgoing Thunderbird emails contain annoying strange characters included after each sentence. How to fix? Thanks. Old submariner, John
 

Read other answers
RELEVANCY SCORE 54

I have a dual boot Ubuntu 13.04 and Win7 HE SP1.
 
Windows 7 bugs
The bugs are mostly random but one; when I put the computer to sleep it wakes up with some of the notification area icons as empty space. That also happens at random sometimes. Other random bugs include:
-Keyboard changes buttons to do unusual things(all at once) where I have been able to revert it by mashing the modifier keys.
-Using the 'Fn' button to turn off my laptops screen occasionally wakes back up instantly.
-When shutting down computer always ask to force close program even when no program exist.
-On startup after entering win7 option during boot drivers are shown as loading.
-On startup after entering win7 another boot menu appears in which there is only one option and if I press 't' the windows diagnostics tool can be used, but the 't' button doesn't do anything. This doesn't happen anymore instead the drivers load now.
-Since driver load screen Windows Task Manager processes are not showing correctly. All processes are under my pc's name and those that aren't are blank in that space aswell as description space. Processes with blanks include the basics; winlog.exe ect. If I right click and open file location nothing happens. If I sleep computer and resume, the processes are back to normal.
-The time won't update from internet and when poor shutdown or battery dies time is reverted to 12:00 2011.
-Whilst monitoring my computers internet packets I noticed every minute or so my computer was commun... Read more

A:Multiple Strange Bugs and Unknown Outgoing Packets

Sorry for the delay. Someone should have to you to repost here.Please follow this Preparation Guide and post in a new topic.Let me know if all went well.

Read other 1 answers
RELEVANCY SCORE 51.2

Hi, a few days ago I guess I downloaded something that has since caused my computer to do the following: 1) random slowdowns, 2) outgoing connections to random IP addresses (found by MalwareBytes), 3) run a svchost process with significant memory usage (250,000 K and higher) 4) there's a strange process running: 3856804458:2513771802.exe. Occasionally, I have also had my search results or webtraffic re-directed.

I'm running Windows XP SP 3, Mozilla Firefox 7.0.1, and I've attached the DDS logs and GMER scripts described in the preparation guide. While running GMER, the program would quit suddenly after running the scan. There was a slight delay before it did so, but I was barely able to save the log. The first time I ran gmer.exe, I crashed to a BSOD saying "Page fault in non-paged area." Not sure if that last part's related or bad luck.

I've since downloaded, updated, and run: Spybot, MalwareBytes, Immunet, and AVGFree 2012. They all found several items, but no solution. MalwareBytes is routinely block IP outgoing IP address, but when I try to actually run it, it says I have the incorrect "device, path, or file."

Any help you fine folks can give me would be very appreciated!
Thanks,
Nick

A:Malware including search redirects, outgoing to strange IPs, weird .exe, and high usage svchost process

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Please download DummyCreator.zip and unzip it.Run the tool.Copy and paste the following into the edit box:

C:\WINDOWS\3856804458
Press Create button and post the content of the Result.txt.

Important: Restart the computer.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is n... Read more

Read other 13 answers
RELEVANCY SCORE 46

I'm running IE6 with OE6, and my outgoing mail will not work... until I goto System Information>Network Diagnostics and run the scan. After I run the scan once it fails, when I run it again it passes, which I can then go back into OE and it sends the mail. ???? Thanks!

A:[SOLVED] Outgoing mail... Not outgoing!

Hi Katelynn7

Are you noticing intermittent internet connectivity with your browsers too or just OE6?

Read other 6 answers
RELEVANCY SCORE 36.4

i cannot enter captcha on any site as i cant see it for some reason i have attached few images which shows the cause of my problem.i have scanned my pc with multiple antivirus but nothing found."]3rd image is tested using Ubuntu but of no use. hope some one can help me as i found no solution for my problem which is causing problems in registering on various sites.i can enter captcha on very few sites eg. - YouTube.but it also says too many request from my network.thank you.

A:too many requests but from where??? help!!!!!!!

Hmm, have you tried clearing you cache?

Read other 4 answers
RELEVANCY SCORE 36.4

I don't know if this should go here or elsewhere but I am attempting to find a new gamertag for my xbox profile on the xbox.com account management page. After I make 20 or so checks for availability an error shows up below the input field saying an unexpected
error has occurred. This message does not stop showing up unless I wait a couple days which makes finding a new name very difficult. Am I being blocked by the server or is this another issue?

Read other answers
RELEVANCY SCORE 36

Well, when I installed IE8, it requested to run add-ons on websites:On some web-sites I ran this add-ons:but, when I run add-ons IE displays Security Warning:I have already installed Adobe Flash Player 10 ActiveX and Adobe flash player plugin, but I think one of them is Opera's Which of them should I run? Run add-on on each website or run add-ons on all websites?

A:IE 8 requests to run add-ons on websites

You can safely run Adobe flash player. That warning is just to let you know that this add-on was already there and asks you to confirm that you want to run it.
Its up to you if you want to decide for every site apart with flash-content if you want to run it or if you want to enable it for all sites. Its no security risk to allow it for all sites.

Read other 5 answers
RELEVANCY SCORE 36

Hello I am looking forward to an updated P72!! Some features I would like to see added vs P71: HDMI 2.0a support and DP 1.44k touchscreen option and a precision stylusTablet mode like the yoga hasHDR optionGsync external and LCD variable refreshUHD optical drive option10GB Ethernet or the interim 2.5/5Gb would be fineLatest WiFi standard .axtitanium to reduce the weightintel real3d camaracamera mechanical cover

A:P72 and features requests

Agree with all suggestions. Hoping for pen digitizer support mostly as I have the P51 version with digitizer presently.

Read other 8 answers
RELEVANCY SCORE 36

I certainly appreciate your position. Indeed you are correct that I originally posted a request for assistance on another forum. After getting a reply from another user on that forum and nothing from the moderators for 2 days I decided to post on your site/forum...thinking that the user reply had suggested to the moderators on the other site that I was already receiving assistance.I have since received a request for my HJT log and info files from the other site so I will rely on them for assistance, My apologies for any confusion this may have caused. It was not my intent. More it was my misunderstanding of how these forums work.Thank you again and again, my apologies for duplicate postings. It was not my intent to over-tax either forum. I was simply getting impatient and after some reading thought erroneously that the user reply to my original post suggested to them that I was already receiving assistance when I was not.

A:Multiple Requests for help

This thread will now be closed since the issue seems to be resolved.If you need this topic reopened, please send a Private Message to any one of the moderating team member or myself. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Read other 1 answers
RELEVANCY SCORE 36

O2 - BHO: (no name) - {cd6caa5d-7035-43dc-abea-a89090a098fd} - C:\WINDOWS\system32\boheyuje.dll
O4 - HKLM\..\Run: [kagizoriha] Rundll32.exe "C:\WINDOWS\system32\kuririme.dll",s
O20 - AppInit_DLLs: C:\WINDOWS\system32\rirebuva.dll

The above lines from hijackthis seems suspicious and is persistent (returns after deletion). I think they are linked to the problem I am having with kasperski detecting requests to get to the address 77.74.48.105 to download what it thinks is malware from programs IE and win 32 services. It may even be causing my IE7 to not function once opened (currently using firefox).

A:PC slowdown; requests to 77.74.48.105

Howdy, my name is Hoov, and I will be helping you with your dilemma. I appologize for the delay in getting you help.Please make sure you watch this thread for responses. If you click the options tab at the top of your first post, you can select to track this thread. Here is what I am asking you to do during the repair of your computer*Tell me everything that you have done, if anything, to try and fix this problem.*Please only use 1 forum to help clear up your problem. Posting on more than 1 and following instructions from more than 1 forum will cause those helping you to pull out thier hair.*Follow my instructions - If you can't for some reason, or if you don't understand something, please tell me. If you deviate from my instructions, tell me, it may make a difference on where we go. Don't install anything, even other programs that have nothing to do with security or malware, it could cause things to change, and I would never know it. *Have faith. I will do all I can to get your computer working, and if I can't - someone else here will know something else to try. *Stick with me to the end. My aim is to fix your problems, and give you the tools and knowledge to keep this from happening again.Now onto trying to fix your computer.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, f... Read more

Read other 3 answers
RELEVANCY SCORE 36

hello mates... i am facing problwm from few days back that when i send request then i get a message i forgot.. can any one plz help me?

A:MSN requests problem

plz help me frieds..

Read other 2 answers
RELEVANCY SCORE 36

I suspect some kind of phishing bug but I am not sure what might cause this issue.
In the 17 years since I started using a computer I have gotten only a few requests to log into the server when I opened my email client. It has been more than a decade since I saw one.
In mid October this happened randomly and I ignored it. Instead I opened my properties folder and checked each tab and closed it. Then I was able to get my email.
After that I think the next day maybe a couple of days later it came back only this time it wouldn't let me get my email when I checked the properties. I ran an MSE scan and it seemed to fix the problem.
Then a week later the same thing happened. This time checking properties and doing an MSE scan had no effect. I was able to send a test email but I did not receive it. I ran an ESET online scan. This seemed to "fix" whatever was causing the log in request. Since about 28 Oct until today there was nothing then this morning it has come up again with a twist; When I check the properties folder my user name and password lines were blank!
I am running an MSE scan and ESET is on deck to run right after. I feel like I am getting a bug from somewhere that is raising a false need to log in so that my password can be gotten. IDK ?????
 

A:Suspicious log in requests

Read other 7 answers
RELEVANCY SCORE 36

this keeps coming up day in day out and it's getting o be a pain

pic of IRQ's from device manager attached

is there a fault/issue with any?
 

A:Multiple IRQ Requests

This May Help
http://forum.notebookreview.com/showthread.php?t=54401
 

Read other 1 answers
RELEVANCY SCORE 36

I'm a programmer, and installed wireshark on my xp machine to do some tcp/ip work. I noticed, even with no programs running I get a constant stream of dns requests to my routers ip.

the requests look like this:
46189 3959.607565 192.168.2.2 192.168.2.1 DNS Standard query PTR 4.160.15.219.in-addr.arpa

46247 3991.834562 192.168.2.2 192.168.2.1 DNS Standard query PTR 210.168.161.188.in-addr.arpa

46201 3972.852314 192.168.2.2 192.168.2.1 DNS Standard query PTR 20.71.103.82.in-addr.arpa

and the responses look like this:
46212 3985.801191 192.168.2.1 192.168.2.2 DNS Standard query response PTR WL.hsd1.fl.comcast.net

46206 3980.680231 192.168.2.1 192.168.2.2 DNS Standard query response PTR pool-173-67-9-33.bltmmd.fios.verizon.net

46199 3968.951943 192.168.2.1 192.168.2.2 DNS Standard query response PTR c-75-70-255-177.hsd1.co.comcast.net

From what I can gather, the requests all look like home isps. There also seems to be a lot of foreign countries like .br and .jp a lot. Has anyone seen anything like this before?
 

A:weird dns requests

welcome to TSG

have you googled all those names? there seems to be no warnings about them
 

Read other 1 answers
RELEVANCY SCORE 36

I set up family safety for my 12 year old daughter, and ticked all the apps she can use freely. Every time she logs on the computer it pops up little messages telling her to request permission to use all the apps that I didn't give her access to. It's very annoying, so how do I stop it, other than the obvious but unhelpful step of letting her access everything?

A:Permission requests

Hello Andy, and welcome to Eight Forums.

The apps that are checked are the ones that are blocked instead. Only the unchecked ones are allowed.
Family Safety App Restrictions - Set and Manage in Windows 8
When you get a request to allow an app and either allow or block it as per the tutorial below, you and the user should not see the messages for that app anymore.

Family Safety Requests - Send and View in Windows 8
Hope this helps for now,
Shawn

Read other 1 answers
RELEVANCY SCORE 36

pl plllllllllllllllllll help
its urgent as my windows is showing stop screen error
i hav done antispyware scanning an then it asked for reboot i said yes an wen i started da windows its saying multiple irp requests
i cant even uninstall antispyware in safe mode as it is sayind windows installer is not proper pl reply soon..........

A:multiple irp requests

Hello and Welcome to TSF

You should have been patient and let the security team in the Hijackthis forum help you remove your infection, improper removal has caused your issue.

Use System Restore to a previous date to see if you can at least access windows in normal mode, then Look over the First Steps at Removing Malware and post the logs requested in the thread you started over in the Hijackthis forum.

Read other 1 answers
RELEVANCY SCORE 36

Is there a place that we can leave feedback or requests for the ATA product?

There are a few things i would like to see changed.  

1.  Alerting
We get alerts during backup windows that the ATA cant keep up but it doesn't seem to have anything to do with CPU or RAM.  In addition, we have no users in the system at that time so i find it very hard to believe
that this is true.  I would like to set time windows where we can exclude these alerts or maybe thresholds where if it is seeing that for 5 minutes, 10 minutes etc.
2.  Email Audience
I would like to be able to say these types of emails go to this distribution list and those go to another so that we keep the number of alerts the team gets down a bit.  
3.  Suspicious Activity
When we get an alert warning of suspicious activity and click the link to take a look, the first thing you have to do is answer whether it is normal or not, but we cant click the link to see the suspicious activity unless
we open the excel file in the email.  This should be adjusted.  

Read other answers
RELEVANCY SCORE 36

The network that I am currently trying to patch up is peer to peer with about 20 machines (win 98 and nt workstation). The company is not willing to switch to a server based configuration at this point. However I am trying to do as much centralized administration as possible.
I want to be able to view the connections (net watcher) to any given computer on the network from one 98 machine. It was easy to set this up on all of the 98 machines, how can I view this information on the nt boxes from the 98 machine. When I try to access the nt machines with net watcher it tells me that the computer does not accept remote requests. If this is not possible can you tell me how to view this information on all of the nt boxes from one nt box.

Thanks,
Monty
 

Read other answers
RELEVANCY SCORE 36

It's time for me to replace my old HP 200LX, and I can't seem to find a PDA that is suitable. Here are my search criteria:

I am 50 & my eyes aren't as good as they used to be.
I need a decent sized display (Palm Pilot types are
too tiny).

Besides the usual PDA (calendar, contacts, etc.), I want
to be able to run some Excel spreadsheets. My spread-
sheets can be robust, so I prefer a landscape display,
not the portrait shape of Palm Pilot type PDAs). Bonus
points for syncing up with my Quicken on my PC.

Connecting & syncing with my Windows PC is a good
idea. This device should augment my PC, not replace it.
(I do use MS Outlook).

My handwriting is horrible -- I need a keyboard, but
the keyboard can be small -- I don't mind hunting &
pecking on the PDA. I also don't mind navigating with
arrow keys.

Ideally, I'd like something about the size of a paperback book. I don't want a full sized laptop -- laptops are a bit big & too expensive. Finally, it would be nice if the device had modern conveniences, like ability to play MP3 files, surf the net, play some basic games, etc. I also wouldn't exclude from consideration any PDA / cell phone combination (although I don't have/use a cell phone yet).

Thanks in advance.run some Excel spreadsheets
 

A:PDA Recommendation Requests

Read other 6 answers
RELEVANCY SCORE 36

Please read this carefully before posting.
The idea:
This thread is meant to collect user's request of new features to add to Windows 7, or to bring back features that were taken out since XP / Vista, and are sorely missed.
The idea is to create a list that MS might want to take a look at.
For this to have a chance, we need to keep the thread clean, and free of unnecessary comments and discussions.
So we need a set of rules.
The rules:


   Information

1. No rants, no debates or discussions, no personal comments, no reactions to other posters, no MS bashing, period!

2. Maximum of 10 lines. So make sure your post is clear and to the point.
One or two words more won't matter, but don't push your luck.

3. Posting of screenshots is allowed to clarify your point.

4. No utopian requests, keep it reasonable.

5. Double posts and posts with features already requested by others will be deleted.

6. Adding a reason why you want it is allowed, but remember the 10 line rule.

7. If a user posts a problem that can be fixed, no help allowed other than saying poster should open a thread about his problem.


   Warning

Not complying with these simple rules, will get your post removed.


   Information

1. Please examine the list to see if your request is already there.

2. Please think about what you're requesting is a good thing for less knowledgeable users.
Example: Making editing the context menu easier, could lead to u... Read more

A:Requests to Microsoft.

A small (IMO not needed) but greatly requested feature reinstated. Put back the wireless icon activity in the tray of the Superbar

Read other 9 answers
RELEVANCY SCORE 36

Hi there all,

I am using a Vodafone 3G Modem om my pc, however I cant send receive USSD commands .. is the software that you can direct me towards that I can use. I am using the Cell C Network in South Africa. I have searched on the net and most of the stuff I find simply doesnt work. If possible could someone assist me wit this request? Just a nice & simple interface that actualy works.
Kind regards

Read other answers
RELEVANCY SCORE 35.6

Got the BSOD with the multiple irp requests error. Help would be appreciated in solving this issue :(

P.S How can I upload the dmp file for debugging?

A:BSOD - multiple irp requests

Here is the dmp

Read other 4 answers
RELEVANCY SCORE 35.6

Hello,
I have a Dell Latitude D630 model laptop that is having problems with memory dumps (BSOD). One thing I recently discovered is that it happens pretty consistantly when removing and returning to the docking station though I don't know why. As far as troubleshooting, so far I have ran the dell diagnostics which came back clean, I also tried to reinstall fresh windows. Then put a new hard drive and reinstalled windows again. Still no luck. The laptop is still under warranty so had Dell replace the physical memory and the motherboard this still didn't help.

A:Multiple IRP Complete Requests

If its still under warranty SEND IT BACK!!! Thats what the warranty is for.

Read other 4 answers
RELEVANCY SCORE 35.6

I am using below code to validate the text in the textboxes. And when i enter the text in that textbox, immediately web service calls and returns the response and based on the response the cursor will move to respected Amount text box. Here , i am getting the
alerts in Google chrome, regarding that entered account is invalid or inActive,,etc but the same code is not working in IE. 

And i need one more help i.e, We've totally 7 textboxes, if the user is entering the text in the 7th textbox if the above textboxes are empty ,, we need to display the alert message like ,, please enter the text in the 1st or 2nd, 3rd,..etc empty text box.

I've written the code for the same as well but it's displaying the alerts twice even the above textbox has the values..



 function AccountData(txtseq) {

        var acc;

        var accountno = "";
        var textbox = "";

        if (txtseq == "Acc1") {
            accountno = document.getElementById('<%=Acct_Number1.ClientID%>').value;
            CheckForValidAccountNo(accountno, document.getElementById('<%=Acct_Number1.ClientID%>'));
        }

        if (txtseq == "Acc2") {
            accountno = document.getElementById('<%=Acct_Number2.Cl... Read more

Read other answers
RELEVANCY SCORE 35.6

Hello have an old acer F6 and installed XP from disc  with a view to using it for games so have not connected it to the internet,however every time I power up and log on I get a "lets activate XP" message.Anybody know how to disarm this requirement in windows please. Have trawled the web and tried various fixes but none have worked and the day counter keeps counting down so its looking like a de install,re install every 30 days.Greatfull for all advice. thanks Ally 

A:persistant activation requests

ally,
 
There is a method to activate by phone if you do not have Internet access.

Read other 3 answers
RELEVANCY SCORE 35.6

I have appear to get a blue screen at random times but generally when I have left my laptop in sleep mode for a while. I have seen some other threads reference this and have found the log below in my event viewer.

Event xmlns=" http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-24T10:07:48.000Z" />
<EventRecordID>40451</EventRecordID>
<Channel>Application</Channel>
<Computer>MainPC</Computer>
<Security />
</System>
- <EventData>
<Data>0x44_nt!IopSynchronousServiceTail+221</Data>
<Data>0</Data>
<Data>BlueScreen</Data>
<Data>None</Data>
<Data>0</Data>
<Data />
<Data />
<Data />
<Data />
<Data />
<Data />
<Data />
<Data />
<Data />
<Data />
<Data>C:\Windows\Minidump\Mini022411-01.dmp C:\Users\Kirstie Shannon\AppData\Local\Temp\WER-277042-0.sysdata.xml C:\Users\Kirstie Shannon\AppData\Local\Temp\WER3FAE.tmp.version.txt</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report154310a2</Data>
</EventData>
</Event>... Read more

A:Multiple IRP requests - BSOD

If you may, please follow the instructions mentioned here. It will generate a thorough and detailed report for us to look at and analyze to diagnose your problems. Thanks, lass.

Read other 1 answers
RELEVANCY SCORE 35.6

Hi folks

Just a quick question ..... Zone Alarm has asked me whether or not to allow these two items access to the Internet. A Motive Cursor Daemon and NetBios. The Net Bios request has come up a couple of times, and I've been denying it so far, on the basis that denying it doesn't seem to be causing any problems. But I'd still like to know whether to deny or allow permanently. The Daemon is a newbie

As always, thanks for your help

A:Zone alarm requests ...

The Daemon program should be some kind of virtual drive program (if I'm not wrong). I would Deny access to both. To avoid this nuisance, check the box at the bottom to remember the settings. If anything, you can go back into ZoneAlarm and change the permissions again if needed.

Only allow access to programs that you know. If anything goes wrong, try giving the program access (it may be valid).

Read other 2 answers
RELEVANCY SCORE 35.6

Whenever I plug a device into a USB port it says cannot proceed without formating the device, even though the device (photo card, flash drive, etc) always worked before. I don't dare format the device because I don't want to lose the information stored. I've tried everything I can find and still cannot solve the problem. Sure do need help.
Operating system is Windows 7, 64 bit pro. Exployer 9. Every thing else seems to be working OK except after updating my drivers the other day Exployer 9 seems to have problems downloading many graphic displays from websites. May be entirely different problem not connected to USB problem as that started more recently. USB is my main problem. I work from home so I'm usually around the computer much of the day or evening.

A:usb requests any and all devices be reformated

Hope that helps.

Read other 8 answers
RELEVANCY SCORE 35.6

I am being frustrated with constant requests for a password. I have just started using this system and during updates the screen would go blank and I had to use CTRL+ALT+DEL to return to the desktop.

On return to the desktop the user name is displayed with the remark LOCKED and the need to enter the password.

When loading music CDs again and again the system displayed the request for a password. This happened at least once during the download sequence and at times twice for a CD with a large number of tracks.

What do I need to do to stop all this nonsense?

A:Constant password requests

Hi Scunnered

Im Not sure if im reading this wrong but what it sounds like to me is you have your screen saver set to password on resume
if this is the case then all you simply need to do is right click your desktop, personalisation, screen-saver
ether change the length of idle time to a longer one or uncheck on resume, display login screen

sorry if i am misunderstanding your problem

Read other 4 answers
RELEVANCY SCORE 35.6

Hello have an old acer F6 and installed XP from disc  with a view to using it for games so have not connected it to the internet,however every time I power up and log on I get a "lets activate XP" message.Anybody know how to disarm this requirement in windows please. Have trawled the web and tried various fixes but none have worked and the day counter keeps counting down so its looking like a de install,re install every 30 days.Greatfull for all advice. thanks Ally 

A:persistant activation requests

ally,
 
There is a method to activate by phone if you do not have Internet access.

Read other 3 answers
RELEVANCY SCORE 35.6

Hi Friends,in my LAN i have 9 laptops, OS installed on them are: 2 Windows 71 Windows vistarest have XP professional.all are getting internet connection and IP address from a SMC router.the problem is that i am getting continous ARP request from vista PC, and request for unknown IP address not in my network.No.     Time        Source                Destination           Protocol Info      1 0.000000    HonHaiPr_30:6d:7c     Broadcast             ARP      Who has 172.16.1.10?  Tell 172.16.1.105      2 0.621020    HonHaiPr_30:6d:7c     Broadcast             ARP      Who has 172.16.1.222?  Tell 172.16.1.105      3 0.625947    HonHaiPr_30:6d:7c     Broadcast             ARP      Who has 172.16.1.69?  Tell 172.16.1.105      4 0.626831    HonHaiPr_30:6d:7c     Broadcast     &... Read more

A:Getting continous ARP requests from a single PC

More than likely you had old network printers , or a printer, that had been configured at IPs that were no longer valid. Deleting the old printers and/or copies of printers will fix it.
When I discovered a computer on our network doing this I came across this forum, and therefore your post, which gave me the idea to check the guys printer list. Two old copies of the downstairs printer were still there, both with pending prints showing.
Checking the ports on each showed the two IP address the machine had been sending out packets for.
 
I know this is an old post, but.... someone else might come along later with the same problem.

Read other 23 answers
RELEVANCY SCORE 35.6

Recently I am seeing these pop up's for updating.   Are they safe? 1.  Evernote 2.  7-Zip 3.  Out of date driver detected How do I know when a pop up is safe to download? thankyou  

A:do not recognize update requests that pop up

> Recently I am seeing these pop up's for updating.   Are they safe?> 1.  Evernote> 2.  7-Zip> 3.  Out of date driver detected> How do I know when a pop up is safe to download? They are "safe", but they are commonly called 'PUP' (Potentially Unwanted Programs). Chances are that you do NOT need any of these programs on your computer. Also, some of these 'PUPs' will ask you to "pay for a subscription".  Do not! I would access "Add/Remove Programs", click to select each program, and click "uninstall".  

Read other 1 answers
RELEVANCY SCORE 35.6

Fss.exe is an excellent program, can't sing its praises enough. That being said, it can be a bit tricky to get the issues fixed once you've identified them. This post is two things - The first is a description of how I take the information provided by FSS and manage to fix machines without a corresponding uninfected machine of the same flavor of windows. The second is a request for the developer to add in some features to make this process easier.
For anyone who's unfamiliar, the app is available at http://download.bleepingcomputer.com/farbar/FSS.exe
This can identify missing registry keys needed for internet connectivity, firewall, or system restore, and it also checks the MD5's of the associated files in system32 and system32/drivers.

If you've identified missing keys, you're going to need copies of the right keys. I've found someone else who compiled a zip for each type of windows covered. http://www.smartestcomputing.us.com/files/download/9-registry-network-keys/
While this has all the keys, you may need to edit permissions, in particular on the legacy keys, to be able to use the reg file.

If FSS identifies the firewall's turned off, just turn it back on using regedit (change the 0 to a 1 at the location in the fss.txt)

Next we get to the sys, dll, and exe files that get md5 checked. These are all available in windows CD's in compressed files which can be opened with 7zip. For windows XP these are available on the CD at i3... Read more

A:FSS tips, tricks, and requests.

While this has all the keys, you may need to edit permissions, in particular on the legacy keys, to be able to use the reg file. I will let Farbar answer the rest, but I want to make one note. I know a lot of people feel its necessary to recreate the legacy keys. The reality is that there is just no reason to replace them. Instead your better off just deleting the legacy key altogether and reboot. The legacy keys will then be recreated when the service starts.

Read other 7 answers
RELEVANCY SCORE 35.6

I have this blue screen problem!!.. I can't format my machine and my current software is Vista.. But I tried to load XP, when starting to load after pre-loading, I took this blue screen alert!!.. How can I format my machine? HELP ME PLS!!

Read other answers
RELEVANCY SCORE 35.6

I've spent the last hour or so looking over several pages of these activation threads and haven't found one that addresses the problem I've recently had with my Win8 x64 activation. My copy of "8.0" Win8x64 has been activated since I bought it direct from Microsoft in January for $39.99 and burned the iso to DVD and installed it (This post does not concern "8.1" as I installed that on another partition entirely just to play with until it is ready for prime time.) I also got the free copy of Windows Media Center with its separate key. For the past six months I've had no problems at all relative to activation. I've actually never had any problems with activation (that I couldn't fix pretty quickly) ever since Microsoft initially started doing its activation bit with its OSes several years ago.

Yesterday, (I've listed my system specs) I'd been experimenting with using my UEFI bios to push the clock rates for my cpu with an attendant .15V rise in power to the cpu core--standard clock is 3.5GHz with Turbo to 4.1GHz--and I incrementally moved the cpu clock to 4.515GHz and turned off Turbo mode (of course), and found that my idle temps while running AMD's Cool 'n Quiet mode (through a UEFI setting) averaged 38C-45C; and ~55C under load (@4.515GHz), which is not much different at all from the standard stock-clocked temps. OK, that's as it should be for a well-binned, good-yielding chip, etc. It overclocks well with very little resistance... Read more

A:Mistaken OS requests for activation

Hi waltc,

Wow, you really know how to write a book with no stone left unturned! Anyway, since you have had 0 responses from the forum, I decided to just throw in my two cents. First off, my reactivations have been much more simple than yours; however, I can tell you that I have been successful every time. Some of these reactivations have included major components and the phone reactivation has always worked for me but the key to success in this area is, when they start to ask you questions, always respond with "one" as the answer. Now, since nobody knows for sure what information MS collects to identify an installation configuration, you can probably expect more of the same down the road but since Win 8 Pro is actually a retail license you should be able to get through a reactivation time and time again (if necessary). Remember, the answer is always "ONE." Cheers.

Read other 10 answers