Over 1 million tech questions and answers.

Win32.Dluca.AX: File C:\program files\Common Files\System\ms1src.exe

Q: Win32.Dluca.AX: File C:\program files\Common Files\System\ms1src.exe

Norton Antivirus has identified this Adware but can't delete it. It seems to be one of the Trojan Horses that, just when you least expect it, suddenly sends you off to a porn site. Can you please tell me how to eliminate it or point me in the direction of existing instructions, if there are any? Thanks. The HijackThis log (v1.99.0) is as follows.

Logfile of HijackThis v1.99.0
Scan saved at 23:57:34, on 08/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Windows\system32\spoolsv.exe
C:\Program Files\Sungard Vaulting Services\AgentSrv.EXE
C:\Windows\System32\Ati2evxx.exe
C:\WINDOWS\System32\cisvc.exe
C:\Windows\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Windows\Explorer.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Windows\system32\atiptaxx.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Compaq\EAB\EabServr.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Windows\system32\timeserv.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\Program Files\QuickTime\qttask.exe
C:\Windows\System32\MsPMSPSv.exe
C:\Program Files\GIANT Company Software\Spam Inspector\siService.exe
C:\Windows\Logi_MwX.Exe
C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe
C:\Windows\SM1BG.EXE
C:\Program Files\USBRadio\QuickRadio.exe
C:\Windows\Dit.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\NETGEAR\WPN511\Utility\WPN511.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Sungard Vaulting Services\CBSysTray.exe
C:\HPDESK\hppddir.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\lotus\organize\easyclip.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\GIANT Company Software\Spam Inspector\siMailProxyServer.exe
C:\Program Files\GIANT Company Software\Spam Inspector\siSpamFilterEngine.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Windows\System32\svchost.exe
c:\windows\system32\dxvid.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
c:\program files\common files\system\mplay64.exe
C:\Program Files\Microsoft Office\Office\1033\msohelp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\system32\cidaemon.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\program files\common files\system\ms1src.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Chris\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic Agent\Web\SearchBar.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.btopenworld.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BTinternet
O1 - Hosts: 172.31.105.1 lam_unix1 lam1
O1 - Hosts: 172.31.105.2 lam_unix2 lam2
O1 - Hosts: 172.31.105.5 lam_unix5 lam5
O1 - Hosts: 172.31.105.10 lam-sun1 sun1
O1 - Hosts: nu.com
O1 - Hosts: nu.com
O1 - Hosts: enu.com
O1 - Hosts: enu.com
O1 - Hosts: henu.com
O1 - Hosts: henu.com
O1 - Hosts: .whenu.com
O1 - Hosts: .whenu.com
O1 - Hosts: nc.whenu.com
O1 - Hosts: nc.whenu.com
O1 - Hosts: inc.whenu.com
O1 - Hosts: inc.whenu.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {1D62BD48-16F6-4004-A54A-3C41E4955A87} - (no file)
O3 - Toolbar: (no name) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\Compaq\EAB\EabServr.exe /Start
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [siService.exe] "C:\Program Files\GIANT Company Software\Spam Inspector\siService.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [DDCM] "C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe" -Background
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -boot
O4 - HKLM\..\Run: [SM1BG] C:\Windows\SM1BG.EXE
O4 - HKLM\..\Run: [QuickRADIO] C:\Program Files\USBRadio\\QuickRadio.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AdwareAlert] C:\Program Files\AdwareAlert\adwarealert.Exe -boot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AS00_WPN511] C:\Program Files\NETGEAR\WPN511\Utility\WPN511.exe -hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ms1src] c:\program files\common files\system\ms1src.exe /install
O4 - HKLM\..\Run: [dxvid] c:\windows\system32\dxvid.exe /nocomm
O4 - HKLM\..\Run: [MPlay64] c:\program files\common files\system\mplay64.exe /noerrorinfo
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\Windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [WeatherBug] C:\Program Files\AWS\WeatherBug\WeatherBug.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BackupMyStuff TaskBar Icon.LNK = C:\Program Files\Sungard Vaulting Services\CBSysTray.exe
O4 - Global Startup: Document Assistant.lnk = C:\HPDESK\hppddir.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Lotus Organizer EasyClip.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: officejet 6100.lnk = ?
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.btopenworld.com/
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.lizardtech.com/download/files/win/djvuplugin/en_US/DjVuControl_en_US.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/DownloadAccess/ie/bridge-c10.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {4E6F9E15-C8E3-4E19-B987-04EF390E9824} - http://www.betfair.com/install/setup.cab
O16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} (PowerPlayer Control) - http://www.ppstream.com/bin/powerplayer.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125068786135
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{609A6CB4-0F8F-4720-ADEC-23DE2D3E35F9}: NameServer = 158.43.240.4,158.43.240.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{66FC3882-2BA3-453C-A65F-47E763B948D0}: NameServer = 213.120.62.99,213.120.62.98
O23 - Service: Connected Agent Service - Connected Corporation - C:\Program Files\Sungard Vaulting Services\AgentSrv.EXE
O23 - Service: Ati HotKey Poller - Unknown - C:\Windows\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GEARSecurity - GEAR Software - C:\Windows\System32\GEARSec.exe
O23 - Service: Norton AntiVirus Auto-Protect Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\Windows\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

RELEVANCY SCORE 200
Preferred Solution: Win32.Dluca.AX: File C:\program files\Common Files\System\ms1src.exe

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Win32.Dluca.AX: File C:\program files\Common Files\System\ms1src.exe

Read other 11 answers
RELEVANCY SCORE 105.6

Hi,

I have been trying to install Microsoft Office and keep getting an error

Cannot access C:\Program Files\Common Files\microsoft shared\ink the file directory is corrupted. I have tried running scan disc and it doesn't work and have tried from the command window and it stops 73% through and say can't go any further to maintain system integrity.

Any suggestions?

Thank

A:C:\Program Files\Common Files\microsoft shared\ink corrupted file directory

Hi tonedef -

Welcome to the Tech Support Forum - Vista Support!

What version of Office are you trying to install (e.g, 2003 or 2007)?

Have you changed any file permission settings or "Taken Ownership" of any folders/files?

The "scan disk" that you mentioned running... was it "sfc /scannow"? If not, click on START | type cmd.exe in the Start Search box | right-click on cmd.exe | select Run as Admin

In the screen that comes up type the following:

sfc /scannow (space after sfc) - press ENTER

Let this run. Try Office re-install.

Good Luck. . .

jcgriff2

Read other 16 answers
RELEVANCY SCORE 105.6

Hi,

after installing a Canon printer driver, I am now getting an error:

Cannot access C:\Program Files\Common Files\microsoft shared\ink the file directory is corrupted.
I have tried running scan disc and it doesn't work and have tried from the command window and it stops 73% through and say can't go any further to maintain system integrity. I have also tried restoring from a back-up but it wont let me as well.

Any suggestions?

A:C:\Program Files\Common Files\microsoft shared\ink corrupted file directory

I have a similar problem, see other thread with same title.

Read other 1 answers
RELEVANCY SCORE 91.6

An error accurred while attempting to create the directory C:\Program Files\Common Files
wont let me install some programs like msn i dunno why..
 

A:error accurred while attempting to create the directory C:\Program Files\Common Files

Bump
 

Read other 1 answers
RELEVANCY SCORE 91.6

Hi, I am tushar I am useing dell opetplex 620. From couple of days I am facing error in my SAP login "Failed to load resource DLL C:\Program Files\Common files\Shystem\OLE DB\ OLEDB32.DLL" and the application does't start. Can you help me guys. It is very urgent for me.

Thanks
Tushar

A:Failed To Load Resource Dll C:\program Files\common Files\shystem\ole Db\ Oledb32.dll

Here is what i found in the Microsoft KnowledgebaseLet us know if this works.

Read other 1 answers
RELEVANCY SCORE 91.6

Thanks to anyone who can help. I've searched for this topic and haven't found anything that worked for me. I posted this topic a couple days ago but just now it didn't show up; sorry if I've double-posted.

I'm trying to download itunes for the first time, but I get the error in the title when I try to run the itunes_setup.exe file. When I cancel, I get "The installer has insufficient privileges to access this directory: C:\Program Files\Apple Software Update. The installation cannot continue. Log on as administrator or contact your system administrator."

I checked and confirmed that I am the admin on my PC, and all accounts are set up with full access privileges to these folders. I also tried rebooting in safe mode and logging on as "Administrator" and running the .exe from a flash drive.

I think I had similar problems loading an XP Office Upgrade a few months ago; I finally just gave up. I have Spybot Search and Destroy; it says I'm clean, for whatever that's worth.

Please help! Thanks again.

A:error occurred with attempting to create directory C:\Program Files\Common Files

You are mostly likley on a limited account.
Are you using Xp
Are you the only account. There are other reasons but lets look at this option first

Go to control panel use accounts and click on your user name , it will say if you are and admin of the machine or you are using a limited account.

Take alook at that and post back

Read other 3 answers
RELEVANCY SCORE 91.6

When I try to install any programs like skype and the last part of the installation I get an error occured while attempting to create the directory: C:program files\ common files
why is this happening? but more importantly how do I fix it?
Thanks for any help given

Read other answers
RELEVANCY SCORE 91.6

Hi there,

I have installed microsoft office 07 when first getting my laptop late last year and have had no problem until today. I find this appearing on my laptop upon trying to open up any microsoft office program: Error 2330. Setup cannot get attirbutes for the C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS. Verify that the file exists in your system and that you have sufficient permissions to update it.

When trying to open windows live messenger i get this message: The file or directory\Program files\common files\microsoft shared is corrupt and unreadable. Please run the Chkdsk utility and the same goes for trying to open winRAR and notepad.

I have tried to do the chkdsk utility but on cmd, was told access denied since i do not have sufficient privileges and need to invoke this utility running in elevated mode.

I should also add that my sister was using my laptop today and told me that these error messages came up when she first opened the laptop and said that my log on was even corrupted! (Note: I normally put my laptop to sleep but when my sister opened it this morning it had restarted instead of just waking up as it normally does)

Sorry for the long post but i thought I should be as detailed as i can even though i know very little about computers...

Any help will be greatly appreciated!

Thanks,
Hel3nz

Read other answers
RELEVANCY SCORE 91.6

Hi, I use my Norton windows scan and I keep getting the message C:\Program Files\Common Files\Roxio Shared\DLLShared." I talked to Gateway Tech and they told me to back up all files and I did on a previous problem but one disc, the second one was corrupt (so it said). I lost everything. I am afraid to do this again they suggest I redo my windows from the very begining that always seems to be there answer. I cannot afford to lose data now. I am having that error message come up and I cannot use my send to drive E to copy discs properly so I got the updated version of Rioxio since the one I had was out dated so I moved up to Roxio 6 and I cannot do anything as far as coping files to disc. I am upset because a very important file is stuck in Roxio 6 that has my excel spreedsheet and it will not let me open it or copy it to CD. I hope this made sense. Please help if you can. I am running a gateway 700XL with XP Thanks
 

A:[Resolved] C:\Program Files\Common Files\Roxio Shared\DLLShared

Read other 11 answers
RELEVANCY SCORE 91.6

C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot

This program keeps poping up in winpatrol dialog box trying to gain access to the startup page.
I keep denying it but every two minutes it pops up again. How do I stop this. What is this? Thanks!

A:C:\program Files\common Files\real\update_ob\realsched.exe -osboot

Do you have Real Player or Real-anything software installed?

The path you posted looks like an update mechanism to me.

Louis

Read other 15 answers
RELEVANCY SCORE 91.2

Hello, I found a folder I am not familiar with.

Named exodus, inside program files,common files.

It has chrome folder inside it,with crash reporter files etc.







I attached the update application.exe to virustotal, and kaspersky website
and they found nothing nor detected it as a virus.

I attached screenshots for your assistance. Thanks in advance.
 

Read other answers
RELEVANCY SCORE 90.8

Hello,Kaspersky gives me the following detection: detected: riskware Invader Running process: C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeWhen I am on the desktop, it makes my monitor "refresh" without moving the icons and my cpu slower. Moreover, it takes about 5 minutes to load the "add/remove programs" menu.I am pretty sure I am infected...please help!HighjackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:13:06 PM, on 07/09/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Java\jre1.6.0_02\bin\jusched.exeC:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exeC:\Program Files\ScanSoft\PaperPort\pptd40nt.exeC:\Program Files\CyberLink\PowerDVD... Read more

A:Detected: Riskware Invader Running Process: C:\program Files\common Files\logishrd\lvmvfm\lvprcsrv.exe

Hi,

Don't worry about that alert from Kaspersky. The file is related with your Logitech Quickam

Read other 23 answers
RELEVANCY SCORE 90.4

Hi guys, I recently removed aol from my system the standard way of add/remove programs in the control panel. However when i did an advanced search of my system to see if it was fully removed, I found an aol file folder in program files, common files, which contains 357 files and 99 folders. Anyway when i right click on it and delete it i get a warning saying, renaming,removing or deleting "aol" could make some programs not work. are you sure you want to do this. My question is, Is it safe to delete this or will it affect any other progams on my pc that i still use. Please let me know. Thanks
 

A:Solved: Deleting aol from program files,common files

Read other 7 answers
RELEVANCY SCORE 88.8

C:\Program Files\Common Files is corrupted. How do I fix this?
Whenever I startup my computer I get error messages about the directory C:\Program Files\Common Files is corrupt. I cannot access the folder because it says it is corrupted or unreadable and tells me to run CHKDSK.

I am running Windows Vista 64 Bit.

I ran CHKDSK and ended up with this.http://img.photobucket.com/albums/v6...t/Untitled.jpg

I did some more research and found out about CHKDSK F and did that and selected for it to run on computer restart. I than restarted my computer and it did a normal restart and did not run CHKDSK. Now I am stuck.

I can't install iTunes or anything.

Can you help?

A:C:\Program Files\Common Files is corrupted. How do I fix this?

Hi, the message you receive C:\Program Files\Common Files is that all, nothing after common files? Go to start ,all programs, accessories and right click on command prompt select "run as administrator" now at the prompt type:-


Code:
chkdsk /r press enter say "Y" to run at reboot
Restart your computer.

It requires that the command be run as administrator.

Read other 3 answers
RELEVANCY SCORE 88.8

I have this alg.exe here .
C:\Program Files\Common Files\alg.exe is a virus !!! thank you team

A:C:\Program Files\Common Files\alg.exe is a virus!!

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 83.2

here is my HijackThis logLogfile of HijackThis v1.99.1Scan saved at 1:06:00 PM, on 2/19/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Norton Personal Firewall\ISSVC.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exeC:\WINDOWS\System32\GEARSec.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton SystemWorks\Norton Anti... Read more

A:C:\program Files\common

Hello,

I guess your Adobeupdater is causing this, because that's the only one I suspect in your log that starts up with Windows where I don't see it running in your processes. This one also runs from a subfolder of the Common Files folder and I guess Windows only reads "common" here since the full path is not between quotes in the registry.

So try next..
Check and fix next entry in Hijackthis (since this startup is not required anyway):

O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater\AdobeUpdater.exe

Reboot your computer.
Let me know if that solved the problem.

Read other 4 answers
RELEVANCY SCORE 82

I have Winpatrol installed on my computer and have had a program try to add itself to my start up, It's ALG.exe but it's not the real alg that is fond in the system 32 folder. This one is in Program Files\Common and is clearly some kind of adware or worse because it shows to be software made by SornSoft named CPAX20,when I place my mouse over the alg.exe file it shows this info below the alg icon. when I go to the SornSoft site it has a program named CPAX version 2.0 and from reading about it it sounds like adware/spyware.

My question is if I can't find it running through WinPatrol, none of my other security software finds it. AVG, Malwarebytes, Obit 360, Spybot or spyware blaster, it is it safe to assume it isn't running. As I said Winpatrol caught it when it tried to add itself to my start up and I clicked do not allow. Also is there any other information about this alg.exe fake out there? Thanks for any help.

Read other answers
RELEVANCY SCORE 82

Hi All

I get the above window open whrn my pc boots up , how do i get rid of it please ....

A very happy Liverpool fan

Rich
 

A:C:\Program Files\Common at start up

Read other 16 answers
RELEVANCY SCORE 82

Hi,

I seem to be infected with helper.dll that is located in c:\program files\common. It pops up everytime I restart my computer and seems to be slowing everything down. I've looked at some of the other posts, but can't seem to find anything in my system registry. I've posted my registry from hijackthis. If someone could tell me what to delete, I'd really appreciate it! Thanks for your help.


Jeff

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:20:29 AM, on 12/18/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c... Read more

A:Helper.dll in C:\Program Files\Common

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 81.2

Hello everyone, I am new to the forum and would like some help.Yesterday, my Norton AV found 2 viruses. It removed infostealer easily. Downloader, not so easy. I eventually deleted it in safe mode. The path was C:\WINNT\system32\msiebbar.dll. Once back in normal mode, I went ahead and deleted temporary internet files folder.Upon restart, and everyone after that, I now have a common files window pop up with helper.sig in it. I tried to find it in regedit with no luck. So, now I'm treading in unfamiliar waters, asking for help to something I know little about. Any help would be appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:24:33 AM, on 8/8/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINNT\System32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Pro... Read more

A:C:\program Files\common\helper.sig At Start Up

Hi docder,Please download Brute Force Uninstaller .Right click the downloaded BFU folder, and choose Extract AllClick "Next"In the box to choose where to extract the files to,Click "Browse"Click on the + sign next to "My Computer"Click on "Local Disk (C:) or whatever your primary drive isClick "Make New Folder"Type in BFUClick "Next", and Uncheck the "Show Extracted Files" box and then click "Finish".RIGHT-CLICK HERE and choose "Save As" (in IE it's "Save Target As") in order to download DeepDive Remover.Save it in the same folder you made earlier (c:\BFU).Then, please go to Start > My Computer and navigate to the C:\BFU folder. Start the Brute Force Uninstaller by doubleclicking BFU.exe Behind the scriptline to execute field click the folder icon and select DeepDive.bfu Press Execute and let the program do it’s job. (Do not be startled as your taskbar will disappear for a little while.)Wait for the complete script execution box to pop up and press OK.Press exit to terminate the BFU program.A notepad file called BFUlogdeepdive.txt will be created on the systemdrive (usually the location will be C:\BFUlogdeepdive.txt). Post the content of that file please.When you reboot the folder should no longer come up.

Read other 6 answers
RELEVANCY SCORE 81.2

Hi all

if you follow the link below you will see my problem , its still happning .. any ideas ? i have tryied all the tips and some of that i now of ..

http://forums.techguy.org/showthread.php?t=461485&goto=newpost

I cant see any thing wrong with this log but i thought i would include it .

Logfile of HijackThis v1.99.1
Scan saved at 09:06:19, on 24/04/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\Grisoft\AVG Free\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG Free\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG Free\avgemc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark 4300 Series\lxcemon.exe
C:\Program Files\Lexmark 4300 Series\ezprint.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\VoyagerTest\fts.exe
C:\PROGRA~1\Grisoft\AVG Free\avgcc.exe
C:\Program Files\inKline Global\PC Booster\pcbooster.exe
C:\PROGRA~1\COMMON~1\AOL\AOL Spyware Protection\AOLSP Scheduler.exe
C:\WINDOWS\System32\lxcecoms.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Common Files\AOL\aoltpspd.exe
C:\New Folder (2)\hijackthis\HijackT... Read more

A:C:\Program Files\Common opens at start up

Closing duplicate.

Please continue here:

http://forums.techguy.org/windows-nt-2000-xp/461485-c-program-files-common-start.html
 

Read other 1 answers
RELEVANCY SCORE 81.2

My computer always loads the folder C:\Program Files\Common on bootup.Also, there are 3 error windows for missing .dll's. I will restart my computer now, and write them down so I can add them to this post.Thanks for any help!------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:00:59 PM, on 12/16/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Java\jre1.6.0_07\bin\jusched.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\OpenOffice.org 2.4\program\soffice.exeC:\Program Files\OpenOffice.org 2.4\program\soffice.BINC:\Program Files\Common Files\Apple\Mobile Device Support\bin�... Read more

A:Program Files\Common opens at boot

Here are the files that error messages pop up for:

c:\windows\system32\mohasobi.dll
c:\windows\system32\terobila.dll
c:\windows\system32\biyedepu.dll

Thanks again, I really appreciate your time and expertise!

Read other 4 answers
RELEVANCY SCORE 81.2

Every time I reboot my computer I get a window with the Helper.dll file in it. This file is located at C:\Program Files\Common. If I close the window it reappears. When I close it the second time it stays closed. Start up is also VERY slow. PLEASE HELP!DDS (Ver_09-07-30.01) - NTFSx86 Run by Slavin at 10:08:38.35 on Tue 08/04/2009Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.487 [GMT -5:00]AV: Norton AntiVirus *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchC:\WINDOWS\system32\svchost -k rpcssC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k NetworkServiceC:\WINDOWS\system32\svchost.exe -k LocalServiceC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\stsystra.exeC:\Program Files\CyberLink\PowerDVD\DVDLauncher.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\Dell\Media Experience\DMXLauncher.exeC:\PROGR... Read more

A:Helper.dll in C:\Program Files\Common Pop up on Startup

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 16 answers
RELEVANCY SCORE 81.2

I looked through the past posts on this subject, but the advice doesn't apply in my situation.

Every time I start Windows the C:\Program files\Common folder opens up.
I have a hunch that it's to do with Install Shield. But I have no idea how to fix it. I have looked at my startup folder and there are no shortcuts to open this window.

I'm going to post my HJT log for your reference.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:07:52 PM, on 28/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\... Read more

A:C:\Program Files\Common opens on start up

Have you tried using MSCONFIG? You can disable all starups, test if problem is fixed, and then add back the option you need.
 

Read other 1 answers
RELEVANCY SCORE 80.4

here is my problem. I read through other posts about this...but I figured every case is a bit different and I shouldn't follow other posts cause they were all a bit different.

I'm writing about our computer at the store I work at. We use it for our register and the past couple of days it has been very slow and on start up an Explorer window pops up and it's Program Files\Common and it has 4 icons helper.dll, _helper.dll, helper.sig and _helper.sig. I've run AdAware and deleted cookies and temp internet files and that doesn't seem to help. I've also just finished running Malwarebytes Anti-Malware and after restart after that finished the helper.dll and helper.sig icons were gone but the _helper.dll and _helper.sig were still there and it is still running slow. I've attached my Malwarebytes Log. This computer is a Gateway desktop running Windows XP. We have McAfee installed but I believe the subscription is ended so as soon as I get this figured out I'm going to have my boss set up a comcast email address to get the free subscription.

Any help would be great!!!! Thank you so much!

attached here is my HJT Log and my Malwarebytes log
 

A:Program Files\Common, helper.dll on restart, slowness

any help please...I know you're all busy, but I really don't want this to just go further and further without getting helped...it's been viewed 42 times already
 

Read other 1 answers
RELEVANCY SCORE 79.6

Recently, I was invaded by tons of malaware and spyware. Nonetheless, I downloaded Spybot Search and Destroy, Ewido Security Suite, Ewido Malaware, Ad-aware, CwShredder and HijackThis! I got rid of much of the problem, but now I have noticed that my computer has slowed down tremendously.First, I continuously experience popups from ad.firstadsolution, they pop up 2-4 at a time, and happen approx. every five minutes.Second of course, my computer has drastically slowed down. Certain programmes experience a freezing state, but eventually go back to being unfrozen.Lastly, everytime my computer starts, C:\Program Files\Common opens and I have noticed that the programmes that once started up in my task bar in the corner, no longer start.Here is a copy of my HijackThis! report.-----------Logfile of HijackThis v1.99.1Scan saved at 2:10:53 AM, on 2/20/2006Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\explorer.exeC:\WINDOWS\SYSC00.exeC:\WINDOWS\sys025144999911.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files... Read more

A:Ad.firstadsolution - Computer Slowdown - C:\program Files\common Opening

Also, I would like to add that regarding the problem of the folder opening every startup, I have checked msconfig and followed the steps prescribed in a previous thread that was posted on here some time ago - and still, nothing.

Read other 10 answers
RELEVANCY SCORE 79.6

Hi,

I have a brand new Dell Inspirion 1501 Windows XP SP2 laptop.I installed a few programs like Word Perfect 2002, Microsoft Office 2003 and a few other things just for some history. Well today out of nowhere, upon booting up my laptop this morning, this window pops up that says BORLAND SHARED...and I go back and find out that it is in the Program Files/Common folder. I did some searching on the web and it sounds like it could be some kind fo registry thing?? Thought the solutions some described seemed too complicated for me!! Please help!
 

A:Program Files/Common/Borland Shared popping up upon boot up

Read other 16 answers
RELEVANCY SCORE 74.8

I bought an external hard drive that will only back up document, music, and photo files but not software. It gives me the choice to back-up My Documents and the Desktop. It also offers checkboxes next to subfolders of the C: drive. I don't know which ones to click so I can stop getting these errors about hidden attribute files and folders. How do you know the difference between all the files?
 

A:program files vs op system files vs documents

I would probably recommend that you check off the "documents and settings" folder within the C: drive. I am trying to recall what else you might need and am drawing a blank
 

Read other 2 answers
RELEVANCY SCORE 74

NoVirusThanks File System Protector is a powerful utility which uses a kernel-mode driver to completely lock a file or a folder and to deny write access to files (allow read-only). You can write rules for any process or only for specific processes, you can lock files or folders and you can also protect files from modifications (write access) so that processes can only read the file content, but not hijack or modify it. With NoVirusThanks File System Protector you can protect sensitive files and folders from unauthorized accesses or modifications, a swiss army knife against nasty ransomware like CryptoLocker family or to just protect important files.

On the ?Settings? tab you can specify a custom logs folder to save blocked events, and on ?Exclusions? tab you can manage trusted applications (using wildcards), so they are excluded from the block-rules. To edit the default rules or to create your custom rules, open the ?Rules? tab and then click the button ?Edit Rules? (it may ask you Admin credentials) to edit the Rules.DB file. The rules are updated in real-time and writing rules is very easy, you can use wildcards characters and aliases, example:


Code:

[%OPER%: DENY_ALL] [%PROC%: *] [%FILE%: C:\locked-file.txt]
[%OPER%: DENY_ALL] [%PROC%: *process.exe] [%FILE%: *\LockedFolder]
[%OPER%: DENY_WRITE] [%PROC%: *] [%FILE%: C:\read-only.txt]
[%OPER%: DENY_WRITE] [%PROC%: *] [%FILE%: C:\ProtectedFiles\*.txt]
[%OPER%: DENY_WRITE] [%PROC%: *] [%FILE%: C:\Prot... Read more

Read other answers
RELEVANCY SCORE 74

I run a system recovery, and ended up having my recovered files in C:/System Recovery file folder/C/ folder. However, I do not know what to do with them. And I cannot open some of those files either. Also, I am supposed to re-load all programs but that folder contains a Program file directory. Question is then, how do I finish the recovery process? I am running Vista, and already did all updates as required.

Read other answers
RELEVANCY SCORE 71.6

Hello please could you offer some help/advice with this problem.I'm trying to sort out a friend's PC for him. It had lots of viruses/spyware on it, but I've been running various virus scanners and think I'm down to the last one. So far I've run:Symantec AntivirusAVGWindows DefenderAd-Aware SEKaspersky on-lineMcAfee StingerThe only one that has identified the problem is Kaspersky, but it doesn't fix it:C:\Program Files\Common Files\System\deb30911.exe Infected: Trojan-Downloader.Win32.Dluca.cp skipped The problem is causing pop-up advertising windows to appear when browsing the Internet. The problem appears to be caused by the file: deb30911.exe which is running as a process. I can kill the process and delete the file but within 30 seconds or so the file is re-created and the process starts again. Sometimes the file changes it's name (or at least the number part) and the filename is currently deb20a10.exeI've attached a HiJackThis log below and would be very grateful for any help/advice.Thanks,Simon.Logfile of HijackThis v1.99.1Scan saved at 10:06:17, on 01/05/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\Ms... Read more

A:Help Required With Win32.dluca.cp Trojan

Howdy simonl,Welcome to BleepingComputer. Looks like the unwanted file has another startup there that is bringing it back each time. Let's address those now, then see what else we need to repair here.Open HijackThis, and choose None of the above, just start the program. Click Config ? Misc Tools ? Open process manager. From the list, click each of the following if it is present, and Kill Process. Close HijackThis.c:\program files\common files\system\deb20a10.exeThen you need to disable Windows Defender, as it may interfere with repairs.* Open Windows Defender* Click Tools* Click General Settings* Scroll down to Real Time Protection Options* Uncheck Turn on Real Time Protection (recommended)* After you uncheck this, click on the Save button* Close Windows Defender-----------------------------------Download the trial version of AVG Anti-Spyware 7.5 from here and install it. This is the trial Anti-Spyware so different from your AVG there.If you have an exisiting copy of Ewido (which this software replaces), agree to the uninstall notification and uninstall Ewido. Reboot after. Then click the AVG download file again to install the software. (If you have a paid version of Ewido installed, go here to follow the steps to upgrade that now.)-----------After installation, double-click the icon on your Desktop to launch AVG Anti-Spyware 7.5.On the top of the main screen click Shield. Then click the word active to change it to inactive.You will need to also update AVG... Read more

Read other 3 answers
RELEVANCY SCORE 70

A folders with the pathname "C:/Program Files/Common" automatically opens at startup, and contains two files named "helper.sig" and "helper.dll". Something is causing my web browser to redirect to unwanted sites. My computer is also significantly slower than just a few weeks ago. My DDS.txt notepad is included below. Can you help? Many thanks!
DDS (Ver_09-03-16.01) - NTFSx86
Run by Owner at 11:02:45.70 on Thu 04/23/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.383.101 [GMT -4:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated)
FW: McAfee Personal Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1... Read more

A:C:/Program Files/Common; helper.sig and helper.dll

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 69.6

hey all... i have a program on my computer that notifies me when files are trying to install themselves silently to run at startup, and i've been getting a few mystery exe's in the last few days, most trying to run from my Common Files. here goes my hijack log. if anyone could hit me back with any idea of what's going on, i'd appreciate it. if this laptop crashes, i am sunk. thanks...

Logfile of HijackThis v1.99.1
Scan saved at 2:54:59 PM, on 1/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\svchosts.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\NavNT\vptray.exe
C:\Pr... Read more

A:files trying to install themselves from Common Files...

Download and run VundoFix: http://www.atribune.org/ccount/click.php?id=4
Double-click VundoFix.exe to run it.
Put a check next to Run VundoFix as a task.
You will receive a message saying vundofix will close and re-open in a minute or less. Click OK.
When VundoFix re-opens, click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES.
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Please post the contents of C:\vundofix.txt and a new HijackThis log.
 

Read other 1 answers
RELEVANCY SCORE 69.2

hello,

i was downloading a update for my nero burning rom and when it finished it i rebooted and then i started get this message what did i do?
 

A:c program files ahead nero.exe not a valid win32 application

did the update install???

Best bet would be to uninstall nero using add remove programs and then reinstall
 

Read other 1 answers
RELEVANCY SCORE 69.2

hello,

i was downloading a update for my nero burning rom and when it finished it i rebooted and then i started get this message what did i do?
 

A:c program files ahead nero.exe not a valid win32 application

closing duplicate, see this thread
http://forums.techguy.org/t71301/sdde3682abf88800139bdc718a2e5d35c.html
 

Read other 1 answers
RELEVANCY SCORE 66.4

I have windows 7, 64 bits. On this system, there is Program Files(x86) folder, which is for 32 bit system. This folder contains information which is used by the system I am using. This is confusing. Why is there Program Files(x86) folder on a 64 bit system ? whats the purpose of providing Program Files (which I guess is for 64 bit system) and Program Files(x86) ?

Thanks

A:why Program Files(x86) is on 64 bit system

Some programs are coded to run in 32bit mode only. Windows that is 64 bit is backwards compatible with these programs, therefore has a folder for those programs.

Read other 2 answers
RELEVANCY SCORE 66.4

Recently, I had my Act! by Sage 2009 version 11.0 customer relations database completely lose all my data. I was using Windows Vista. I have since upgraded to Windows 7. I have tried repeatedly to reinstall Act! by Sage 2009 and I get an error message that says the program recognizes a previous version of Act and it requires that I exit the installation and remove all previous versions. I was able to unistall Act! using the uninstall programs option. However, Act files remained in the Program Files. When I try to remove the ACT file in Program Files it will not allow me to because it says the file is open in Windows Explorer. I tried opening Windows Explorer to try to locate the file and close it but I could not locate any Act files. I tried disabling windows explorer and it removed all icons from my desktop and I couldn't access any drop down/ pull up menus so I didn't know how to proceed. I restarted the computer to get my standard settings back.

What I'm ultimately trying to accomplish is to reinstall Act! by Sage 2009 so that I can then buy an upgrade to Act! by Sage 2010 and install it. The program path that appears to be my problem and which I can't remove is as follows:

C:\Program Files\ACT\Act for Windows\Plugins\Act.UI.InternetExplorer.Plugins.AttachFile.dll

which is listed as a "File Extension". The Error Message list the File Description as "Act BHO plugin".

How can I close this file in Windo... Read more

A:Deleting a file from Program Files

The plugin can be disabled manually if you are ok modifying the Registry yourself, otherwise you can download and run HiJackThis (www.lurkhere.com/~nicefiles). When you run it, you will get a list of all sorts of items, scroll down until you locate the "C:\Program Files\ACT\Act for Windows\Plugins\Act.UI.InternetExplorer.Plugins.AttachFile.dll", put a check in its box and have HJT 'Fix' it. Then close HJT, restart windows and you should be able to delete the file.

Read other 2 answers
RELEVANCY SCORE 66

My AVG Antivirus Resident Shield recently popped up saying the following files were infected:

c:\WINDOWS\system32\winlogon.exe
c:\WINDOWS\system32\dllcache\winlogon.exe
c:\WINDOWS\explorer.exe

I know these are critical system files and it says so. Therefore, they cannot be uninfected or else it might damage the computer. The only solution I had was to run the WINNT32.EXE (/cmdcon) installer from the C:\WINDOWS\I386 folder so I could install the Recovery Console. I am now able to use it from startup and everything but once I enter the Administrator password I have no idea how to proceed. I had tried the SFC.EXE /SCANNOW solution, but since I don't have the XP Service Pack 3 Installation Disk with me, this won't work. I don't know how to use the Recovery Console commands, so does anyone know how I can replace the corrupted and infected system files listed above with their original version? This is really important and any good help soon would be greatly appreciated!

UPDATE: It appears my I386 backup copy of the WINLOGON.EX_ was also infected: I used the Recovery Center at startup to expand this backup copy and replace the current infected one in the system32 folder. The virus was still detected in the same location by AVG. The only solution I can find is to replace the infected winlogon.exe files (along with the explorer.exe ones) with a legitimate copy from another computer. I must either acquire a new ... Read more

Read other answers
RELEVANCY SCORE 66

My AVG Antivirus Resident Shield recently popped up saying the following files were infected:

c:\WINDOWS\system32\winlogon.exe
c:\WINDOWS\system32\dllcache\winlogon.exe
c:\WINDOWS\explorer.exe

I know these are critical system files and it says so. Therefore, they cannot be uninfected or else it might damage the computer. The only solution I had was to run the WINNT32.EXE (/cmdcon) installer from the C:\WINDOWS\I386 folder so I could install the Recovery Console. I am now able to use it from startup and everything but once I enter the Administrator password I have no idea how to proceed. I had tried the SFC.EXE /SCANNOW solution, but since I don't have the XP Service Pack 3 Installation Disk with me, this won't work. I don't know how to use the Recovery Console commands, so does anyone know how I can replace the corrupted and infected system files listed above with their original version? This is really important and any good help soon would be greatly appreciated!

UPDATE: It appears my I386 backup copy of the WINLOGON.EX_ was also infected: I used the Recovery Center at startup to expand this backup copy and replace the current infected one in the system32 folder. The virus was still detected in the same location by AVG. The only solution I can find is to replace the infected winlogon.exe files (along with the explorer.exe ones) with a legitimate copy from another computer. I must either acquire a new W... Read more

Read other answers
RELEVANCY SCORE 66

Hi,

I have been getting alerts from AVG that Win32/Themida is being detected in .dll and .exe files in what I believe to be some sort of system restore section of my files. The process is E:\WINDOWS\system32\svchost.exe. I checked what services were included in that particular instance of svchost with Process Explorer, and it all seems legitimate.

An example of what kind of files are being infected:
E:\System Volume Information\_restore{A3D15A3E-BC66-4BD0-97C7-E3BFA85E82A2}\RP151\A0040045.dll

The other files infected seem to be similar names (A00#00##.dll, and I have just encountered an .exe with a similar name that was infected).
I am getting the alerts practically every time I start up my computer, and if I leave my computer for a while, I'll come back to AVG listing the same file infection multiple times. Every time, I've told AVG to heal the infection, but that doesn't seem to stop it from continuing.

I'm not exactly sure what I've installed recently that could've done this.
Your help would be greatly appreciated, I'm not a big fan of formatting and reinstalling everything. And yes, my Windows installation is on the E drive.

EDIT: I installed Spybot: Search and Destroy, and it detected some cookies, as well as a worm (Win32.Rungbu.a). I healed all infections, but it hasn't fixed this Themida issue.

Here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:55:33 PM, on 1/30/2010
Platform: Windows XP S... Read more

A:AVG detects Win32/Themida in system restore files

Bump.

In case you wanted to see another filename example:
E:\System Volume Information\_restore{A3D15A3E-BC66-4BD0-97C7-E3BFA85E82A2}\RP152\A0040164.dll

It's constantly going through these files, i'd really appreciate some help.
 

Read other 1 answers
RELEVANCY SCORE 65.6

I was going to uninstall win pro sp3  and install win 8 until i had a lot posts about this on a topic which I sttarted on this forum. The majority of these posts were from people who have had bad experiences with win 8 so I have decided on win 7.
 
I've never installed a new operating system and I would like to know what I can do about all my current programs, of which there are a lot. I assume I can't just tranfer them to win 7 so I would be very grateful if someone could give me the procedure I should follow..My folders and files which are on one hard drive are also large - at present 230GB.
 
Any other advice which you consider appropriate would also be very welcome.

A:Program files and new system installations

Joe, me again.  I'm going to watch your post.  I have an XP pro SP3 and feel there's not a lot going for it since it apparently can't be upgraded or changed or relied on after April 8, 2014.  Hopefully you'll find out a lot more for all of us. 

Read other 5 answers
RELEVANCY SCORE 65.6

I have a DVD with a video clip file which lacks file extensions, the file has certainly been copied fully and without errors, I believe the only problem is the name but I don't have a backup of that on my computer so I'm stuck. I need to copy this file from my DVD to my computer but it says that "it cannot read from file or source disk". Is there a program which bypasses the fact that my video clip has no file extension will copy it to my pc just the same?
 

A:program to use for copy of CD with no-file-extension files

Read other 7 answers
RELEVANCY SCORE 65.6

Hi everyone how do I move a file (not a shortcut) from my desktop back to program files.

A:Move file from desktop to program files

Try to cut and paste it. If its just a folder it should work.

Read other 2 answers
RELEVANCY SCORE 65.6

I need to unlock file sharing between 2 computers on a network to 1 Program File folder. They are both running vista32. I have searched all night with no luck and only hope that someone here has an answer. This is for a flight simulation game that can use another computer to run a few separate programs that add features to the game. People are not reporting problems while using XP. So I know this can be done, the question lies with Vista and is capabilities. I have share my whole C drive then program files then the folder that I need to be able to get into, but when I try to access the folder from my secondary computer it lets me know that access is denied. I can access pretty much any other folder on the computer other than program files. Any help??

Thanks!

A:Unlocking file sharing for Program Files

Hi Twig1983. . .

I don't believe it is possible to share the entire c: drive or the entire Program Files folder in Vista because of sub-folders/files in each of which you (the user name you logged on with) are not the owner of, not to mention files within each whose attributes are system and/or hidden. The "<access denied>" screen that came up is a product of Vista's User Access Control (UAC).

However, there are usually ways around any rule.

A few questions first, please. . .

1. Are these PC's XP-> Vista upgrades, or new Vista installations?

2. When you elected the share, were you logged on with an admin account?

3. Is the admin account that you use one that was set up at the time of the Vista installation?

4. Is the user account on PC#2 an admin account or a standard user account (that you are using and get <access denied>)?

5. Do you get the <access denied> message simply trying to read the folder/file from PC#2? What about during program execution?

6. Prior to the <access denied> message, is there a UAC prompt?

7. Yes >> Does it ask for a password, or can you simply select "Continue"?

8. Are you sure that it is the Program Files folder you are failing on or could it be the ProgramData folder (which the Program Files folder uses for most of its non source-code data under Vista)?

9. Have you looked at the Event Viewer?

10. Is it necessary to elect to share the entire c: drive and ... Read more

Read other 3 answers
RELEVANCY SCORE 65.6

I'm looking for a program to Show and Extract files a .dat file.

Hopefully a free program.

I'm trying to extract music files for a .dat file.

Thanks
 

A:Program to extract files form a .dat file

Not sure about extracting but, here is a viewer:
http://www.exits.ro/
 

Read other 1 answers
RELEVANCY SCORE 65.6

Could anyone help with understanding exactly what this file is. It's running from notepad and located in 'program files'

-------Application Run Starts--------------------------------------
-gC
Instructed to search generically for 200.
Running application - Parsed CMD line
OS Version--Major 5 Minor 1 Build a28
Guessing failed, trying SPTI
SPTI Access Mode Activated to Scan for Drives.
Found something -- Type MAXTOR 6L040J2 ?`?w Bus 0 ID 0
Not a CD, DVD, or CD-RW drive. Skipping profile check.
Found something -- Type TEAC CD-W516EC ?`?w Bus 0 ID 0
SPTI Pass-through Successful
ATAPI Return Code: 0/0/0
Returned data 0 2a 1 0 0 0 0 0 2a 22 7 7 71 77 29 23
Matching against 200. Profile found: 707
Found a Winner!
--------Application Run Starts--------------------------------------
-gD
Instructed to search generically for 8.
Running application - Parsed CMD line
OS Version--Major 5 Minor 1 Build a28
Guessing failed, trying SPTI
SPTI Access Mode Activated to Scan for Drives.
Found something -- Type MAXTOR 6L040J2 ?`?w Bus 0 ID 0
Not a CD, DVD, or CD-RW drive. Skipping profile check.
Found something -- Type TEAC CD-W516EC ?`?w Bus 0 ID 0
SPTI Pass-through Successful
ATAPI Return Code: 0/0/0
Returned data 0 2a 1 0 0 0 0 0 2a 22 7 7 71 77 29 23
Matching against 8. Profile found: 707
Open Adapter Failed.
Open Adapter Failed.
Open Adapter Failed.
Open Adapter Failed.
Open Adapter Failed.
Open Adapter Fai... Read more

Read other answers