Over 1 million tech questions and answers.

persistent malware, antivirus/antimalware tools don't work, internet doesn't work, multiple iexplore popups, won't...

Q: persistent malware, antivirus/antimalware tools don't work, internet doesn't work, multiple iexplore popups, won't...

I'm having difficulty figuring out this persistent malware. I think it's likely that there are multiple issues.

I'm running Windows Vista.

The malware started off with "google redirect" symptoms, and disabling my Symantec software

Shortly following, I could no longer access the web. However, the malware itself would create an internet explorer popup every 5-10 minutes (not my default browser) that would go to "search sites" (none that I recognized....) and search for lewd topics. Running the taskmanager would show multiple instances of iexplore.exe running on my machine (one for each popup). The popups would have to be eliminated one by one using the task manager.

Trying to run a system restore, I discovered all restore points had been deleted.

I installed AVG antivirus and got it to run once which seemed to help the problem. However, upon restart, all issues were back and I could no longer run avg. Windows defender constantly pops up that a new trojan is attacking my machine.

At this point, I unplugged my internet connection and started using another machine. I had left my problematic computer alone for about a month.

Upon turning it on last night, each time I logged on, it gave me a warning that "Windows had encountered a critical error and will restart in one minute" and would restart. I tried running cmd (in that one minute) to intercept it, but the task manager would freeze if I tried to run it from there and explorer would freeze if I tried to run it from there. I also discovered my Guest account is not working.

I restarted in Safe Mode and ran msconfig and disabled all non-Microsoft services. Upon restarting my computer, I found I could successfully log on (although Guest account is still not working).

At this point I figured I ought to post a highjackthis log to a forum.

My computer would not let me install using HJTinstall.exe so I renamed it to HJTinstall.scr. After installation, highjackthis ran for about 1second and closed abruptly. My machine will not run highjackthis nor will it let me rename it. If I try to run it, it says that it cannot access the file, device or path and perhaps I don't have permission, and if I try to rename it, it says that I need permission to do so and asks if I'd like to try again. Right clicking does absolutely nothing. This is all the same in safe mode, although right clicking in safe mode will at least bring up the options.

I'm out of ideas. Any help would be greatly appreciated.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: persistent malware, antivirus/antimalware tools don't work, internet doesn't work, multiple iexplore popups, won't...

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 88.4

A few days ago the three windows running laptops in my apt randomly lost internet connection. The network would display as full strength connection but no pages would load in IE or FF. However, the one macbook was still working (although sluggish) After trying to futz with the IP settings on each of the laptops, I gave up and reset the router hoping everything would go back to normal.

Well, now nothing works. All four machines still show full strength connection but nothing will load and no IM clients will connect. So, I tried to hardwire the connection to one of the computers straight from the modem and again, same issue. It shows a full connection, packets being sent and received, but no actually connection whatsoever.

Of course my ISP sees the modem connected and claims it can't be their problem so I'm left to fix this on my own.

Does anyone have any suggestions? I'm at my wit's end on this one.
 

A:Multiple laptops show connectivity but internet doesn't work

For a PC connected directly to the modem (remember to power cycle it) please show ...

Start, Run, CMD, OK to open a command prompt:
(For Vista or 7 type CMD in the Search box after Start)

Type the following commands:

IPCONFIG /ALL

[Note that there is no space between the slash and ALL.]

PING 69.147.114.224

PING YAHOO.COM
Right click in the command window and choose Select All, then hit Enter.
Paste the results in a message here.

If necessary use a text file and removable media to copy the results to a computer with internet access.
 

Read other 1 answers
RELEVANCY SCORE 86.8

Hello,
I am running Windows XP on a laptop, and I recently ran into some spyware/adware called MicroAV that installed itself onto my comp. and flooded me with false security messages. To get rid of it, I downloaded windows live onecare and ran a scan. It found some viruses and deleted them, and for a few hours everything was fine. Then, internet explorer couldn't connect to the internet. Firefox still worked though, so I ignored it and used Firefox. After waking up the next morning, however, I couldn't connect at all. I am connected to my wireless network and I can log into my router to change settings but the internet wont work. I tried three browsers and Itunes music store and none will work, however Limewire will connect. I can't ping any sites or do anything other than Frostwire though. Its not a problem with my router as my Ubuntu OS on the same comp works fine on the same network.

PS: I also uninstalled OneCare so its not the firewall or antivirus.
 

A:Internet Doesn't work after malware removal

I got that issue on one computer and fixed it with this....
 

Read other 3 answers
RELEVANCY SCORE 85.2

I have Uploaded this two files like the guide says... any help would be nice
 

A:internet doesn't work after malware removal vith malewarebytes

the two files are from farbar recovery scan tool
 

Read other 1 answers
RELEVANCY SCORE 85.2

I'm typing this up on my better working computer, because I'm having issues with IE 7 and Firefox in my Windows XP Media Center Edition.

This started with my Outlook Express crashing everytime I opened an attachment, so I randomly downloaded and ran CCleaner, which sort of fixed the problem.

But then i noticed that the pages on IE would never work properly. Each time I clicked on a link, it would open it in a new window. the AVG website wouldn't work, even though it connected from my other laptop (thru a wireless connection). Some pages I tried going to check on this problem wouldn't open, and IE would say there was a problem opening the page. So i downloaded Firefox and it kind of did the same thing.

With firefox I noticed that it opened a new tab and i saw something in the url called www.windowsclick.com....... and a really long url following.

So I'm pretty sure it's some kind of trojan that my AVG (8, which was REALLY buggy) couldn't see. And I tried using Avira and Spyware Terminator (which I had to download on another computer and bring it to usin my usb key.

My comp is
Dell Inspiron 1501
AMD Turion 64 X2 Dual-Core TL-58
120 GB HDD
1.5 GB RAM
Windows XP Media Center Edition

Also there was this weird issue with it not recognizing my USB Keys for awhile, so that was kind of scary, but it seems to have been fixed.AND I can't get rid of AVG 8 for some reason.... but that could be for another day.

A:Internet explorer doesn't work properly. Can't find malware

Hello and welcome..From your regular user account..Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..DO NOT run yet.Open SUPER from icon and install and Update itUnder Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.Now reboot into Safe Mode: How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox or Opera browser click that browser at the top and choose: Select AllClick the Empty Selected button.If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.NOW Scan with SUPEROpen from the desktop icon or the program Files listOn the left, make sure you check C:&#... Read more

Read other 1 answers
RELEVANCY SCORE 84.8

Hi,

My computer was infected by Antivirus Pro today. I downloaded Malawarebytes' Anti-Malaware, which seemingly solved the problem, but my computer still seems to be infected with malware. When I type something into the Google search box on Mozilla, I am redirected to pages such as "Shopica" or "lowpriceshopper." If I click back and search for the same term again, the appropriate website will come up after the second try.

I have downloaded numerous free malware programs, and they all seem to run for long periods and then get stuck.

1) Malaware Anti-malaware-scans and then (Not responding)-->gets stuck at C:\Windows\system32\config\Default.LOG1

2) Superantispyware-gets stuck in the scanning process at C:\Windows\system32\config\RegBack

3) Spybot search and destroy-"coolwwwsearch.bootconf, couponbar, Mediaplex, and Win32.TDSS.rtk" come up, but it says that "This action may not be performed since you are not an administrator. If you want this performed for all users, please elevate this as an administrator."

4) Advanced system care-did not detect anything!!!

5) AVG anti-virus-scans for hours and never seems to end

Please help!

I can post a hijack this log if that helps.

Thanks in advance.

A:Can't remove malware/spyware, despite multiple antimalware programs and antivirus software

Hello zephyr11 and to BleepingComputer!First of all we need to run a rootkit scan.Also, please tell me if Malwarebytes Antimalware can be updated without problems.ROOTREPEAL-------------We need to check for rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Zip Mirrors (Recommended)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive.Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

Read other 8 answers
RELEVANCY SCORE 84.4

Internet explorer icon does nothing.

can access internet through e-mail but the iexplore icon does nothing.

Iexplore on other users on the computer works but not with my user.

A:iexplore icon doesn't work

Right click on the ican and goto properties. Look at the path it has listed for internet explorer. Asuming you are using windows xp it should be "C:\Program Files\Internet Explorer\IEXPLORE.EXE" Make sure it has not changed from this.

Read other 2 answers
RELEVANCY SCORE 83.6

Hello,
I have problem with Internet Explorer, and couple other programs that need internet,
I don't know why Internet Explorer don't work, I'm using right now Mozzila Firefox.
Can somebody help me?

I have Windows XP Professional SP3 operating system, Internet Explorer 8.

Screenshot:

Diagnostic log(Xpnetdiag.xml):

Code:
<?xml version="1.0" ?>
<?xml-stylesheet type='text/xsl' href="xpnetdiag.xsl" ?>
<xpnetdiag>

<title>
Network Diagnostics for Windows XP
</title>
<lastRunText>
Last diagnostic run time:
</lastRunText>
<rejectText>
REJECT
</rejectText>
<indeterminateText>
INDETERMINATE
</indeterminateText>
<confirmText>
CONFIRM
</confirmText>
<timeStamp>
08/17/15 19:32:16
</timeStamp>
<component name="HTTP, HTTPS, FTP Diagnostic" startDiagnosisTime="08/17/15 19:32:16">

<rootCause name="HTTP, HTTPS, FTP connectivity" status="confirm">

<trace traceType="info" text="HTTP: Successfully connected to www.microsoft.com.">

</trace>
<trace traceType="warn" text="HTTPS: Error 12157 connecting to www.microsoft.com: An error occurred in the s... Read more

A:Internet Explorer doesn't work, couple other programs that need internet won't work too.

OK so using IE you are not able to browse to any pages at all? What about the gateways at msn.com, yahoo.com ect? Can you get to secure pages like Https://live.login.com
 

Read other 4 answers
RELEVANCY SCORE 81.6

I seem to be having problems similar to a few people on here and elsewhere.Google search redirects me to various other links (through Classy Search Server usually) when I click on searched links through its website or toolbar.Antimalware (Malwarebytes) and Antivirus (AVG) don't work or begin to start and after a few seconds disappear.I tried TDSSkiller which found a couple of infected files and then went to cure them and after a reboot found one or two more and after a reboot again one or more again in different registry files, so I think that perhaps isn't working properly or is infected too? Or perhaps I keep getting new poisoned stuff whenever I log in?Sometimes when I open programmes a windows warning box appears saying some parts of the programme are blocked, would I like to unblock?, which seems a bit suspicious to me and the programme seems to work ok when I just close the box. These warnings haven't appeared before is all and why I thought it was worth mentioning....I have done the preparation outlined for such matters on your website, and have an issue with the DDS programme, because it thinks it's an AutoCAD script file not a screen saver and I get gobbledegook instead of prose etc... Can anybody help with this stoof?Cheersi have managed to make the DDS programme work i think. Here is its text and attachmentI tried the gmer programme and that ran and then had similar problems to the Antimalware stuff. it worked for maybe 2 minutes scanning and then s... Read more

A:Infected with TDSS and Google keeps redirecting plus AntiMalware and Antivirus programmes do not work or shut down after opening

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 79.2

Pasting in contextual information from another post. ~ OBconflicker.Bi!nf worm keeps reappearing, windows defender monitor stops working, slow computer, windows search protocol windows pop up, Malware, virusPop up windows keep appearing "Windows search protocol host stopped working and was closed" Itunes occassionally doesn't work, Media Sync doesn't work. Hard Drive keeps working in the background. Windows Defender no longer monitors the running programs.End of added information. ~ OBLogfile of Trend Micro HijackThis v2.0.2Scan saved at 8:46:00 AM, on 1/11/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18349)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Digital Media Reader\readericon45G.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exeC:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Windows\WindowsMobile\wmdc.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Windows\sttray.exeC:\Program Files\... Read more

A:microsoft windows search protocol host stopped, slow, firefox doesn't work, itunes doesn't work

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 78.4

Hi! My computer is Lenovo b575e and Windows 10. It updated new version of that last week. I have Avast and Malwarebytes anti-malware on my computer. Now internet,firewall and virus program don't work.
First my computer start to be more slow. And sometimes I had to start computer to get internet work again. To restart my computer actually didn't work properly. My computer made huge update last week to windows 10 newest version. This week I had problems with internet and my browse get slower. Then I lost my internet connection and then my firewall stop working and in the end my antivirus program. And sometimes my usbs don't work. Malwarebytes works but it don't find anything. Same problems on the safe mode. Computer complaits 0x80070426 and diacnostic policy service not running and someting that diasnostic using service not and windows information security center service can not start. What trojan program to my CD/USB? And how to check my USB too because I have used that so it is infected perhaps too...Is it some windows 10 bug too? I need you help. I don't know what to do. Thank you

A:Internet,Firefall and antimalware programs don't work. Trojan?

And even my calculate don't open. It complaits that I had use another account. It can't use my system monitor account. I have different language on my computer than english so sometimes funny translations.

Read other answers
RELEVANCY SCORE 78.4

Hi! My computer is Lenovo b575e and Windows 10. It updated new version of that last week. I have Avast and Malwarebytes anti-malware on my computer. Now internet,firewall and virus program don't work.
First my computer start to be more slow. And sometimes I had to start computer to get internet work again. To restart my computer actually didn't work properly. My computer made huge update last week to windows 10 newest version. This week I had problems with internet and my browse get slower. Then I lost my internet connection and then my firewall stop working and in the end my antivirus program. And sometimes my usbs don't work. Malwarebytes works but it don't find anything. Same problems on the safe mode. Computer complaits 0x80070426 and diacnostic policy service not running and someting that diasnostic using service not and windows information security center service can not start. What trojan program to my CD/USB? And how to check my USB too because I have used that so it is infected perhaps too...Is it some windows 10 bug too? I need you help. I don't know what to do. Thank you

A:Internet,Firefall and antimalware programs don't work. Trojan?

And even my calculate don't open. It complaits that I had use another account. It can't use my system monitor account. I have different language on my computer than english so sometimes funny translations.

Read other 5 answers
RELEVANCY SCORE 77.6

Help my windows 7 laptop just keeps rebooting and i cant get to safe mode or recovery what should i do ?

A:system recovery doesn't work and safe mode doesn't work and just keeps reboting

System manufacturer and model?
 
Louis

Read other 0 answers
RELEVANCY SCORE 77.6

hi, I know there are many in the forum who have the same problem as mine. 
 
my computer was running fine last friday. I tried to start it on saturday, it says it can't startup and need to repair startup. I did run the repair but still can't startup. I tried to use system restore to earlier dates, it still can't startup. The computer has trojan virus before and I tried the anti-malware from internet to kill them. seems that it create more problem for my PC. I have some important files in the computer that I wish I have archived. 
 
wonder if any one can help. thx in advance.

A:can't start up computer-window7, repair doesn't work, restore doesn't work

I'll report this topic to appropriate helpers.
Hold on there...

Read other 6 answers
RELEVANCY SCORE 77.6

Help my windows 7 laptop just keeps rebooting and i cant get to safe mode or recovery what should i do ?

A:system recovery doesn't work and safe mode doesn't work and just keeps reboting

System manufacturer and model?

Read other 5 answers
RELEVANCY SCORE 76.8

Hello. I have Windows xp Intel. Since a family member and friend used my computer, my home page when clicking on internet explorer was changed. I have tried to change it back, but unable too.

It maybe coincidental this happened "after" someone used my computer.

However, now since when i click on tools and internet options, the later does NOT respond. Also another route I use to take was via "start" control panel, internet connections, and all those links work as nomal. But the last link via this route to "change internet connections" etc does NOT work either. I hope I have exlained good enough my problem and NOT said to much. Would appreciate help with this problem.

Best wishes. Ifor Love[/SIZE]
 

A:Internet options in tools does NOT work

It sounds like you POSSIBLY have some sort of malware in your machine. I suggest as a first step to click on the red triangle in the upper right hand corner or the dialogue box and ask a moderator to move your thread to the malware section.

One of the malware guru's will ask you to download and run HighJack This and then post a log. Let one of the malware guru's examine the log and see if you have malware problems.
 

Read other 3 answers
RELEVANCY SCORE 76.4

Hellow,

A few months ago I purchased Noton AntiVirus and installed it on my PC. Everything worked fine without any problems. A week ago I formatted my pc and reinstalled Norton, everything worked fine again. Yesterday however I had to remove the program again and reinstall it. But: now the LiveUpdate doesn't work anymore. I don't know why, I did the installation exactly the way I had done it before. I tried to download the updates from Symantic-website, but most of the links of that website I can't connect with (The page cannot be displayed), so I also cannot connect with the download-page. The rest of the internetwebsites do work, so I don't think it has got anything to do with my internetconnection.
Can anyone help me?
 

A:LiveUpdate Norton AntiVirus doesn't work

Read other 9 answers
RELEVANCY SCORE 76.4

Hi all.

To delete a number of items at once in My Documents or in My Pictures, I hold down the Ctrl key while clicking a few items - and then I click 'Delete'.

But half the time I do this, instead of deleting the items - it makes another copy of them.

Is there any way of correcting this problem? It would now take me a full half hour to individually delete each file.

Thanks for any help.

A:Multiple Deleting Of Files Doesn't Work.

That's not a problem, it's a common mistake I make when trying to move/delete numbers of files.

More precise keystrokes will fix .

Louis

Read other 4 answers
RELEVANCY SCORE 76

After being infected with "Antimalware Doctor", Java 6 started opening up and going crazy; I could not update Windows Defender, or access the task manager with CTRL+ALT+DEL. I tried many things to correct it, ending with an OS repair using the Vista Home Premium DVD. This seemingly fixed the issue, but now I have multiple instances of iexplore.exe opening in the background, accompanied by pop-up ads every 20 minutes. The "Antimalware Doctor" pop-ups no longer occur, however, and I can access the task manager again.A scan with SpyBot S&D yielded a few adware fixes, none of which solved the problem. Malwarebytes' Anti-Malware, Windows Defender, and Microsoft Security Essentials detect no problems.I have the DDS logs as per forum request, but GMER crashes to BSoD every time I scan. Trying to start the OS in Safe Mode also yields a BSoD every time, always crashing when Windows is loading "crcdisk.sys". About ready to pull my hair out! Any help would be greatly appreciated.DDS (Ver_10-03-17.01) - NTFSx86 Run by Young at 21:27:33.36 on Sat 05/15/2010Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_13Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3325.2027 [GMT -4:00]SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\syste... Read more

A:Antimalware Doctor infection + multiple iexplore.exe running in background

Hi,Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloadedClick rootkit-tab, uncheck files option and then click scan.Don't check Show All box while scanning in progress!When scanning is ready, click Copy.This copies log to clipboardPost log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

Read other 19 answers
RELEVANCY SCORE 76

My parents got a new Windows 8 computer recently. They asked me to help them with a problem - the internet was slow and now IE stopped working. No pages load.
 
In Firefox you see a DJ Mixi toolbar and popups everywhere. Windows defender is turned off. I don't see any antivirus software on the computer.
 
I'm hoping for some help to cure the infection and put some basic security in place for Windows 8 (never used it before) so they don't have problems in the future. I was going to run an online scan but I know how tricky trojans and viruses are today, sometimes that is not enough and can make the problem harder to solve.

A:DJ Mixi Virus - IE doesn't work, Firefox popups Windows 8

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwareby... Read more

Read other 27 answers
RELEVANCY SCORE 76

I was downloading a crack for driver detective and think I might have a virus. Can someone look this over and see?Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:20:08 PM, on 10/16/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18319)Boot mode: NormalRunning processes:C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exeC:\Program Files (x86)\DAEMON Tools Lite\daemon.exeC:\Program Files (x86)\Pando Networks\Media Booster\PMB.exeC:\Program Files (x86)\Trillian\trillian.exeC:\Program Files (x86)\Common Files\Lenovo\Scheduler\scheduler_proxy.exeC:\Program Files (x86)\Lenovo\NPDIRECT\tpfnf7sp.exeC:\Windows\SysWOW64\rundll32.exeC:\Java\jre6\bin\jusched.exeC:\PROGRA~2\ThinkPad\UTILIT~1\PWMUIAux.exeC:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXEC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpageR1 - HKLM\Softw... Read more

A:Taskman doesn't work, random popups from news articles

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 5 answers
RELEVANCY SCORE 76

Hi,

I'm trying to make an arsenal of the best antivirus, antispyware, antimalware, and registry cleaner tools. (Also is there such a thing as anti-hijacker tools?--or does this fall under antimalware usually?)
Please fill me in on the top free and paid software for each of these categories.

Currently the list of tools I have is: Avast, Malware Bytes, Spybot S&D, TDSSKiller, ComboFix, and Advanced SystemCare Free.

Thanks,
-Jshine

A:Best Antivirus, Antispyware, Antimalware, Registry Cleaner Tools?

Please DO NOT USE COMBOFIX on your own without supervision!!!Please see ComboFix usage, Questions, Help? - Look hereI would replace SpyBot with SUPERAntispyware.Best free AV's Avast or Avirabest pay... ESET or Kaspersky.Bleeping Computer DOES NOT recommend the use of registry cleaners/optimizers for several reasons: Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what cons... Read more

Read other 18 answers
RELEVANCY SCORE 76

My boss' personal laptop has a problem, and I believe it's caused by something called "AV2009". I uninstalled it (or so it appears), but the problem remains. Search results in both msn.com and google.com appear valid, but clicking on anything takes me to a totally unrelated website. Manually typing anything into the IE address bar results in a "website not found" error. So essentially, there is no internet connectivity except for websites this hijack allows me to go to. I copied Malwarebytes onto the laptop using a USB stick, but double-clicking the install file does absolutely nothing.

Where do I start with this???

A:AV2009 infection, no internet, no tools work

Try renaming Mbam.exe to somethingelse.exe ans see if it will run

Read other 1 answers
RELEVANCY SCORE 75.6

I have scanned with AVG with the latest updates. On top of that insidious google redirect I get random pop ups even when I don't already have IE or Firefox running. Also getting sounds in the background like I'm clicking on a link, surfing the net when I'm not. And SYSTEM in task manager is hogging a ton of memory.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 11:52:42 PM, on 8/7/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exeC:\... Read more

A:persistent malware undetected by virus scans and malware removal tools

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please download OT... Read more

Read other 2 answers
RELEVANCY SCORE 75.6

Well, my computer is mostly running fine, there's only this problem of me not being able to update any antivirus/antimalware that I want to including super anti-malware, malwarebytes, I can't update kaspersky internet security 2010 cuz its not activated - try to activate the trial or use a commercial license code to activate, it gives the error " unable to connect to server " but when I use a key it gets activated? And I have been recently infected with a virus/ rootkit.. so maybe its not fully removed?Anyways here's the hijacthis.log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:21:27 PM, on 11/26/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18319)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Program Files\Zain e-GO\Zain e-GO\Zain e-GO.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Windows\system32\wuauclt.exeC:\Program Files\Internet Download Manager\IDMan.exeC:\Program Files\Internet Download Manager\IEMonitor.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeC:\Windows\System32\mobsync.exeC:\Program Files\Avant Browser\avant.exeC:\Windows\system32\DllHost.exeR0 - HKCU\Softwar... Read more

A:Can't update antivirus, ie, avant browser doesn't work

Hello and to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.*If you have since resolved the original problem you were having, we would appreciate you letting us know. *If not please perform the following steps below so we can have a look at the current condition of your machine. *If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.**If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. In order to be notified via email when your topic has a reply you need to enable topic notifications. To enable topic notifications you should do the following: 1. Click on the My C... Read more

Read other 2 answers
RELEVANCY SCORE 75.6

I had Antivirus 8 spyware load on my laptop the other day. Immediately I checked Bleeping Computer from another laptop and followed the instructions for downloading Malwarebytes Anti-Malware, having to download it onto this other laptop and transfer it across to my computer via a memory stick. I changed the filenames as instructed and ran the full scan which identified around 9 items which needed removing and removed them.

Now I can't seem to use Flashplayer. I tried to run a Facebook application and it said, "Page should load after 10 seconds. If not, you may need to upgrade your version of Flashplayer." So I clicked on the link and downloaded the newest version (10.1, I think). However, this does not seem to have worked. I have tried to do this again several times, going onto Adobe's site itself to try and download it, and although it goes through what seems to be a proper download process, it doesn't seem to be saving itself to the computer. Does anyone have any suggestions as to what I should do?

A:Antivirus 8 removal, now Flash doesn't work and won't load

Try the following: Adobe Flash Uninstaller then try and reinstall Flash Player.

Read other 3 answers
RELEVANCY SCORE 75.6

Hello, I am pretty certain I picked up something today. My windows 7 SP1 laptop was running fine, then I start getting this alert. I do not get this alert when I run my laptop in safemode. My antivirus will not run, I open it and then I get the same alert. I cannot do anything with out the alert going off and stoping what ever I do. I cannot even access Malwarebytes. I am posting this from my iPad as I do not want to do anything to my laptop without a plan, and guidance. Thank you for your time, I hope we can resolve this.
Respectfully, Zorbazium.
P.S. If you have any questions please ask. I will do my best to answer them in detail.

A:Alert about my antivirus being "Server Down" but the Reroute that doesn't work?

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery... Read more

Read other 22 answers
RELEVANCY SCORE 75.6

Hi,

We use Chrome browser and XP on a laptop and a PC. The PC is OK but in the laptop when we want to email something in Yahoo to multiple recipients, the Control+Click or Shift+Click doesn't work in the CC or BCC menu.

Any solution please?
Thank you!

Read other answers
RELEVANCY SCORE 75.2

I have a Windows XP SP3 PC from a user who was infected with malware, I used Malware Bytes to remove the offending software, and now I am unable to open the Windows Update page. I can browse to other pages but after a few minutes, I get redirected to another random page. I also keep seeing the Just In Time debugger. Tried a Registry edit I found recommended elsewhere, to fix that issue, but that didn't last. At this point, neither SAS nor MBAM see any malware present, but I am stuck with my problem. Existing antimalware package is MS Forefront. All utilities I have used have been updated to the most recent definitions.

A:Malware Bytes cleaned malware, now Windows Update doesn't work, webpages randomly redirected

Hello,Please follow the instructions in ==>This Guide<== starting at Step 6.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to try to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 75.2

In Internet Explorer, when i goto Tools > Internet Options, I get a dialog box that says:

This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.

Well, it's a home/family PC, and Im the main user of it. How can I get access to the Internet Options?
 

A:[InternetExplorer] Tools > Internet Options wont work?

Read other 16 answers
RELEVANCY SCORE 74.8

Apologies if this has already been asked...
 
http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-master
 
After restarting into windows as listed in step 8, the malware takes over the computer once again. And like before, I can't run anything.
 
Has their been an update to the removal process?
 

A:Windows Antivirus Master Removal Guide-doesn't work...

In this case please follow the steps outlined in the topic linked below:Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Read other 1 answers
RELEVANCY SCORE 74.8

This is awful. I noticed my PC Tools Spyware Doctor and Antivirus had stopped working. I found that Spybot tried to scan and then just disappeared from the screen - unable to start up again. Similarly with Immunet I installed. Using Google Updater I discovered that the google updater service wasn't started. I tried to manually start it but got an error "Error 1053"

I tried Windows Defender and it came up with a serious threat and called it Trojan:windows32 sirefef.B or something similar. It failed to remove it and now doesn't even pick it up.

Any search [using Chrome] to find out about it made my browser redirect to Stopzilla site. And then after a while an odd looking 'survey' about Google. Luckily I was able to use Maxthon browser to visit the actual sites behind the genuine links.

I have now tried to follow the instructions on this site about 'before you post'...

1. HijackThis. I managed to install it and run it but there was an hiccough and it disappeared! - I have no idea why and I cannot get it back and it didn't write anything to a log file. I even tried to re-install HJT but it wouldn't run. When I click on HijackThis.exe now I get the error 'Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item". [I am running this computer as a administrator.]

2. Downloaded DDS successfully and got that to produce the appropriate files - Attach.zip is... Read more

A:google Redirects, Antivirus doesn't work, sirefef.B trojan?

Read other 16 answers
RELEVANCY SCORE 74.8

Hi there,

I've had a few viruses, spyware, etc and after running Spybot, ad-aware 6, ewido and NAV 2006 looks like I got rid of them. After that, I cleaned as much as I could with the Ace Utilities.
The only problem I have is that the Norton Antivirus 2006 now doesn't start when the computer starts.
If I click on "Nmain.exe" doen't work either, but If I run it through the start-up icon it works fine.

Could anyone see my log and tell me please if there is anything wrong???

Your help will be very very appreciated !!!

Thank you very much.

Tonono

Logfile of HijackThis v1.99.1
Scan saved at 8:37:39 PM, on 7/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5346.0005)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Syman... Read more

A:Norton Antivirus 2006 won't start. NMain.exe doesn't work

Hello Tonono and welcome,

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out these instructions.

************************************************

Download KillBox (it's important that you get version v2.0.0.175)

-----------------------------------

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode and press Enter.
5) Login on your usual account. Make sure to close any open browsers.

-----------------------------------

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries:

O20 - Winlogon Notify: artm_newreg - C:\Documents and Settings\All Users\Documents\Settings\artm_new.dll
O21 - SSODL: DCOM Server 2236 - {2C1CD3D7-86AC-4068-93BC-A02304BB2236} - C:\WINDOWS\system32\2236_27.dll (file missing)


Click 'Fix Checked' and close HijackThis.

-----------------------------------

Launch KillBox.exe & select the following options: Delete on Reboot
All files (if available)
Copy the file names below to the clipboard by highlighting them and pressing Ctrl-C:

C:\Documents and Settings\All Users\Documents\Settings\artm_new.dll
C:\WINDOWS\s... Read more

Read other 19 answers
RELEVANCY SCORE 74.8

Hello!

So I managed to spill a cup of tea earlier today, spilling tea over my desk, hitting a few keys of my keyboard - a Razer BlackWidow Ultimate 2012 edition.
Most of the keys on the keyboard didn't work, or needed to be hit several times before anything happened.
I have restarted the PC, changed USB port and even changed keyboard to some old Logitech one, but most keys still doesn't work.

Since the keys aren't working on either one of the keyboards I tried I have no clue what could have happened, and need some help figuring this one out.

All help appreciated!

A:Keyboard keys doesn't work on multiple keyboards after spilling tea!

Could be the damage to the first keyboard damaged the PS/2 port or the USB port it was plugged into which in turn causes a replacement keyboard to not be full functional. Best thing I've done with spills is to immediately unplug the keyboard and turn it over to drain as much liquid out as I could then I've rinsed it out with clear water, shook and tapped it to get any water out then put in the sun to dry for several hours.

Read other 6 answers
RELEVANCY SCORE 74.8

Hello, My laptop is HP Pavillion DV6875se with Windows 7 OS. It was working great before a month, but all of a sudden the following issues came up1. The power button of the laptop doesn't turn on/off the laptop. I have to use a detachable remote to turn the laptop on. I don't see blue light on the power key, once the remote turns the laptop on.2. The quick play touch sensative keys above the laptop key board have blue light in most of them. But its flickering red for volume, and no indicator on the volume increase decrease touch region. Though some have blue indicator, red lights....none of the touch sensative keys function at present.3. The laptop touch pad is unresponsive. It has its blue light, which doesn't turn red even if the touch pad is locked. I use a USB mouse as of now.4. Laptop has 3 audio jacks. One for microphone, and 2 for headphone. The external speaker doesnt have any sound, so i have to plug in earphone everytime to listen anything. In control panel --> under sound --> playback ---> i see speakers and realtek digital output ---> both show green oscillating bars when an audio is played. But the volume key in quick play tab is flickering red all the time. The laptop is fully functional. But it would be great if the problems mentioned above gets fixed. Sincerely 

Read other answers
RELEVANCY SCORE 74.8

Hello,

Yesterday AVG found a virus in my computer and it said removed succesfully but after the reboot AVG antivirus doesn't work anymore. Also Windows Update seems to be disabled. I already tried Superantispyware which keeps finding a trojan and Malwarebytes' Antimalware.

I need help to resolve this problem.

Thank you

A:AVG doesn't work because of a malware

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 6 answers
RELEVANCY SCORE 74.8

I would really appreciate some help figuring this out...

I've run many anti-malware cleanups using 6 of the better softwares out there.

None of them has been able to eliminate this noxious iexplore.exe process.
It makes random clicking noises, random audio popups and also both
full-screen and smaller popups. Always re-starts very quickly when I
kill the processes.

I've run HijackThis and done my best to locate any dubious processes but at
this point I'm stuck. I think this Malware is attached to some legit process
or something that keeps re-starting it.

Here's the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:04:06, on 7/17/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acronis\TrueImageEnterpriseServer\TrueImageMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\WINDOWS\system32\PDesk\PDesk.exe
C:\Program Files\Microsoft Office... Read more

A:Audio popups, plus popups - multiple Iexplore.exe processes - please advise

Hi

Please do the following:

Please download MBRCheck.exe to your desktop.

Be sure to disable your security programs
Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
A window will open on your desktop
if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
If nothing unusual is found just press Enter
A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
Please post the contents of that file.

NEXT
Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

NEXT
Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.
Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan bu... Read more

Read other 3 answers
RELEVANCY SCORE 74.4

I am trying to use my CD-ROM drive and it doesn't work here are the list of things I have tried

Uninstalled and reinstalled the cd-rom driver it is a Matbleepa UJ-840D CD-ROM/DVD/CD-RW in my HP laptop (Didn't work)

Read stuff about code 39 and removed in the registry edit screen Upperfilters, Upperfilters.bak, Lowerfilters, Lowerfilters.bak and rebooted (Didn't work)

Removed itunes from computer (didn't solve the issue with cd-rom player)

Went back to a system restore point that was before the last time I used the CD-rom player and it worked and that (didn't work as well)

Read a lot of different posts about code 39 and nothing is given after the above steps are taken if it still won't work except to reformat which I would prefer not to do.

Any help would be greatly appreciated.

A:CD-ROM doesn't work, code 39 error, tried many things still doesn't work

1. Uninstall the drive through Device Manager.Restart computer. The drive will be automatically reinstalled.or...2. Delete Upper & Lower Filters http://support.microsoft.com/kb/982116Restart computer.or...3. Download, and run Restore Missing CD Drive patchDouble click on cdgone.zip to unzip it.Right click on cdgone.reg, click Merge.Accept registry merge.Restart computer.or...4. Go to Device Manager, click a "+" sign next to IDE ATA/ATAPI Controllers.You'll see two items:- ATA Channel0 (or Primary Channel)- ATA Channel1 (or Secondary Channel)Right click on each of them, and click Uninstall. Confirm.Restart Windows. They'll be automatically reinstalled.

Read other 6 answers
RELEVANCY SCORE 74.4

IE has been acting slow and has a popups.. I can open google but any site after that I get redirected to has an ad geared directly to whatever I was just searching.. Firefox is usable but I sometiimes get popups.. I usually use google chrome but recently it has slowed down and frozen on screens and the tab never finishes loading..Also a yellow "!" triangle appears on my lower right side bar.. It tells me I have infections on my computer. I dont trust it however because sometimes multiple will appear in the corner at the same time. Also the picture doesnt look official to me since its distorted and blurry..Whenever I run Malwarebytes Anti-Malware it gives me a list of my infections, I go through the normal procedure of deleting them, then it tells me to restart for the changes to take effect, and then I click yes and the computer restarts. However on startup when I rerun the program I still have infections on the computer.I see the "blue screen of death" much more frequently now (im not sure if this is applicable).. just in the past 24 hours its happened at least 15 times..Thanks for your help! DDS:DDS (Ver_09-03-16.01) - FAT32x86 Run by Clifford at 0:54:37.90 on Mon 05/11/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.895.417 [GMT -4:00]============== Running Processes ===============C:WINDOWSsystem32svchost -k DcomLaunchSVCHOST.EXEC:WINDOWSSystem32svchost.exe -k netsvcsSVCHOST.EXESVCHOST.EXEC:Pr... Read more

A:persistent malware.. Malwarebytes Antimalware unable to get rid of it despit repeated tries and restarts

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 14 answers
RELEVANCY SCORE 74.4

Hi, none of the browsers I have installed right now work properly (Avant, Mozilla, IE 7, I had IE 8 but uninstalled it).

I also uninstalled Mozilla.

Avant does not allow downloading. IE has not Tools bar, no downloading, no right clicking.. All it has is an address line, stop and refresh.

Please help me I don't know what to do. I tried deleting all the programs that looked suspicious and have already run ComboFix (but I don't know what to do with it next)

I cannot paste my dds because paste doesn't work either, so I attached all files I think are relevant.
 DDS.txt   13.43KB
  4 downloads
 DDS.txt   13.43KB
  4 downloads

 ComboFix.txt   19.45KB
  5 downloads

A:Internet Browsers don't work properly (don't download, no right clicking, no "Tools" in IE)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 74

My computer has been rebooting when doing an AV scan with Avira. I have tried AVG, Avira, and others. Avg just makes all of the icons disappear except 3. I use XP home with SP3. I have tried everything I have heard of, but no solution. So, I decided to post here to ask if anyone could help me. I used the HijackThis Program. This is the log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:06:06 PM, on 11/29/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\windows\System32\smss.exeC:\windows\system32\csrss.exeC:\windows\system32\winlogon.exeC:\windows\system32\services.exeC:\windows\system32\lsass.exeC:\windows\system32\svchost.exeC:\windows\system32\svchost.exeC:\windows\System32\svchost.exeC:\windows\system32\svchost.exeC:\Program Files\Tall Emu\Online Armor\oacat.exeC:\Program Files\Tall Emu\Online Armor\oasrv.exeC:\windows\system32\spoolsv.exeC:\Program Files\Avira\AntiVir Desktop\sched.exeC:\Program Files\Avira\AntiVir Desktop\avguard.exeC:\windows\system32\svchost.exeC:\windows\System32\svchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Progra... Read more

A:Computer slow and rebooting when running scans. Antivirus doesn't work.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 73.6

Nothing runs, they all close after a few seconds, here is a win32diag.http://www.bleepingcomputer.com/forums/t/257949/possible-system-32-issues-and-multiple-malware/Running from: C:\Documents and Settings\Praha\Desktop\Win32kDiag.exeLog file at : C:\Documents and Settings\Praha\Desktop\Win32kDiag.txtWARNING: Could not get backup privileges!Searching 'C:\WINDOWS'...Found mount point : C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\System.EnterpriseServicesMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP58F.tmp\ZAP58F.tmpMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB8.tmp\ZAPB8.tmpMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\assembly\temp\tempMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\assembly\tmp\tmpMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\CDIIWall3res\CDIIWall3resMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\Config\ConfigMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\Connection Wizard\Connection WizardMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\Copy of Options\Install\InstallMount point destination : \Device\__max++>\^Found mount point : C:\WINDOWS\Debug\UserMode\UserModeMount point desti... Read more

A:No antivirus or malware removers work.

Hello my name is Sempai and welcome to Bleeping Computer.*We apologize for the delay. Forum have been busy.*I want you to understand that I'm still a trainee here. I will be working with my Coach who will approve all my instructions before posting them to you, so there's a possibility to have some delays in my responses. But the good part is, there are two people reviewing your problem instead of one.*It is important not to make any further changes or run any other tools unless instructed to. This may hinder the cleaning process of your machine.*You must reply within 5 days otherwise this topic will be closed.Your log will be analyzed and you will be instructed on what to do next as soon as possible.

Read other 22 answers
RELEVANCY SCORE 73.2

Hi guys, the answer to the question is probably yes, but i want to be sure. I'm running windows 7 64 bit sp1, and this is what happened (there will be some missing information, but pc stopped working in middle of night and I was a little in panic, so I may have forgot something.) Note: My OS is in Italian, so the system messagges are not exactly the same of an english version because I'm traslating them.
 
The short version is: Realtime protection of antivirus doesn't works (tried both with avast and then avira, reinstalling/cleaning doesn't works), windows update doesn't work, and microsoft fixit can't fix it :D. I don't know if there is a problem with admin rights or something like this (the first error i got was from dropbox that couldn't obtain admin rights) or it is a malware.
 
 
The long (watch out, is a wall of text) version with everything i tried until now is here:

 

Step 1: programs stopped working, just after I installed mass effect 3 from origin, but this could be unrelated, I wasn't using pc because i was waiting for ME3 to finish the download. I remember that i couldn't launch firefox anymore, pc started to go very slow, task manager didn't start and windows updates message popped up, and another strange thing, i couldn't use the keybord combination using "alt gr" (on the italian keyboard the @ must be done with the alt gr). So i rebooted the system. Note: I have windows update set to manual (I have to chose what do download, so when the m... Read more

A:Windows update doesn't work/Antivirus realtime protection stopped. Infection?

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

Read other 18 answers
RELEVANCY SCORE 73.2

My computer got a nasty little bug on it.

I believe it was one of those fake antivirus trojans. I had one before and Malware Bytes took it right off, but it couldn't do it this time. The malware keeps reloading on the system regardless of what I use.

I've used PC Tools Spyware Doctor (which I paid for and it has done nothing of note); Spybot and MBAM. The program keeps redirecting my browser to google-redirect.com or something like that and giving me tons of ads.

This is the log that I got after the most recent MBAM attempt.

I've removed and rebooted, with this and spybot, but the result is the same each time.

Please help.

Thank you.

Malwarebytes' Anti-Malware 1.36
Database version: 2084
Windows 5.1.2600 Service Pack 3

5/6/2009 7:14:22 PM
mbam-log-2009-05-06 (19-14-22).txt

Scan type: Quick Scan
Objects scanned: 86122
Time elapsed: 5 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 8

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\Temp\msb.dll (Worm.Autorun) -> Delete on reboot.
C:\WINDOWS\system32\autochk.dll (Worm.Autorun) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run�... Read more

A:persistent malware - ran MBAM, PC Tools, SpyBot, still there

i have the same issue please help. Except I only have Usernit

Read other 3 answers
RELEVANCY SCORE 73.2

If I try to use the Ctrl-Click action on web pages that allow you to select multiple items in a list box, a new ie session opens (to my home page) instead of allowing me to make multiple selections. This happens with ALL web pages that have multiple select boxes. It only happens on my desktop (XP with i.e 7), and not on other computers in my house with ie7.
- I tried disabling ALL active X controls and add-ins. Still didn't work.
Any ideas please? (It's maddening!!)

A:Control-Click doesn't work with multiple select lists-it opens a new ie page instead

One thing you may want to check is the control panel/accessibility options and make sure nothing is checked in there. Sometimes the accessibility settings for the keyboard will play havoc with what you think should be happening with keys.

Read other 6 answers
RELEVANCY SCORE 73.2
A:infected with malware (clipboard doesn't work)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers