Over 1 million tech questions and answers.

Leftover Kazaa problems

Q: Leftover Kazaa problems


I am trying to help my friend again with her PC. I removed Adware and Kazaa a few months ago but someone installed Kazaa again so now I have to clean it up again. She promised her first born if it happens again.

I have installed the latest Windows security updates, cwshredder and Spybot but the browser is still not 100%. It is usable but there 4-5 ads when you launch. Here is her Hijack this file

Logfile of HijackThis v1.97.7
Scan saved at 7:00:14 AM, on 6/4/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Common files\updmgr\updmgr.exe
C:\Program Files\Altnet\Points Manager\Points Manager.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\documents and settings\user\local settings\temp\wZcwMvNRl.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Optimizer\actalert.exe
C:\Program Files\Lexmark X125\LEX125SU.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\user\My Documents\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - C:\Program Files\TV Media\TvmBho.dll
O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - (no file)
O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - C:\Program Files\scbar\v9\scbar.dll
O2 - BHO: (no name) - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\bxxs5.dll
O2 - BHO: NavErrRedir Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - C:\PROGRA~1\PERFEC~1\BHO\PERFEC~1.DLL
O2 - BHO: (no name) - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing)
O2 - BHO: (no name) - {83DE62E0-5805-11D8-9B25-00E04C60FAF2} - C:\WINDOWS\2_0_1browserhelper2.dll
O2 - BHO: (no name) - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem218.dll
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\System32\bridge.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dll
O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem218.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O3 - Toolbar: ISTbar - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\ISTbar\istbar.dll
O3 - Toolbar: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\WindowsUpd4.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
O4 - HKLM\..\Run: [AltnetPointsManager] C:\Program Files\Altnet\Points Manager\Points Manager.exe -s
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load
O4 - HKLM\..\Run: [pybjwnadmuk] C:\WINDOWS\System32\mwvzapst.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [arwv] C:\WINDOWS\arwv.exe
O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRun
O4 - HKLM\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKLM\..\Run: [SearchEnhancement] "C:\Program Files\scbar\v9\scbar.exe" /H
O4 - HKLM\..\Run: [DealHelperUpdate] C:\WINDOWS\DHUpdt.exe
O4 - HKLM\..\Run: [DealHelperBrwsr] C:\WINDOWS\dhbrwsr.exe
O4 - HKLM\..\Run: [izstidbp] C:\WINDOWS\odrbvzkha.exe
O4 - HKLM\..\Run: [wZcwMvNRl.exe] C:\documents and settings\user\local settings\temp\wZcwMvNRl.exe
O4 - HKLM\..\Run: [asradr] C:\WINDOWS\System32\asradr.exe
O4 - HKLM\..\Run: [mpdxmw] C:\WINDOWS\System32\mpdxmw.exe
O4 - HKLM\..\Run: [arrhookn] C:\WINDOWS\System32\arrhookn.exe
O4 - HKLM\..\Run: [ymStoreS] C:\WINDOWS\System32\ymStoreS.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ClockSync] C:\PROGRA~1\CLOCKS~1\Sync.exe /q
O4 - HKCU\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://active.macromedia.com/director/cabs/sw.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38072.6865509259
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab

Thank you!

Preferred Solution: Leftover Kazaa problems

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Leftover Kazaa problems

Read other 11 answers

First i had kazaa 2.0 on my computer then i decided to update to the newest i think 2.1 or 2.2 whatever it is......well then my problems started......everytime i went to search or just to exit the program kazaa would just freeze up and make everything run slowly.....so i decided to delete kazaa and get kazaa lite to see if the problem would go away then but still i have the same problem.....

A:kazaa / kazaa lite problems

What operating system are you using? Kazaa has a lot of spyware. Use Ad-aware, www.lavasoftusa.com, to remove the spyware.

Read other 2 answers

I had a virus/rootkit that I thought I had cleaned up. I'm still having the following issues though:
1. Blue screen trying to boot into safe mode (can't read reason)
2. Generic Host Process for Win32 Services has encountered a problem and needs to close message
3. Can't run full antivirus scan now without getting the above error, but it pops up at other times, like right now. When I get it, I have to restart my laptop - it won't do anything else.
4. Have the occasional extra pop up with an advertisement when I open up IE.
5. I couldn't post this on my laptop - I had to borrow someone else's for a few minutes to get this to go through. It just kept saying it couldn't diplay the page after I tried hitting submit.
6. My laptop is running much slower than normal.

Hope someone can help! I'm in the middle of a big project that needs files from my only computer, so this is the worst timing ever!

DDS (Ver_11-03-05.01) - NTFSx86
Run by Liz at 17:38:04.46 on Fri 05/13/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.894 [GMT -4:00]
AV: Symantec Endpoint Protection *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
============== Running Processes ===============
C:\WINDOWS\System32\svchost.exe -k Cognizance
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k ne... Read more

A:Leftover Problems from Rootkit

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
If I instruct you to download a specific tool in which you already have, please delete the copy that you hav... Read more

Read other 3 answers

Last night I got a nasty case of the Virusbursters disease. I'm running a fully updated Windows XP. I followed the "How To Remove Virusbursters" instructions for the automatic removal, and that seemed to help. Then suddenly the whole thing started over again. Then I tried following the manual removal instructions, but none of the dll files that I was supposed to remove were present. Then I read somewhere that Prevx would get rid of it, so I used the Prevx software and that did seem to get rid of Virusbursters. Although it did leave an entry for it on my quickstart bar and my Add/Remove Programs list. Unfortunately, a range of other stuff has been popping up. Random IE pop-up windows and even Firefox tabs coming up with ads for porn and music sites, and most of all for BS anti-virus programs. One repeat offender is something like Win Anti-VirusPro, or something like that. Also, Windows Explorer has been crashing, leaving me with a blank desktop. [Edit - I see others are having issues with this as well. Also, one bit I forgot - my Norton Anti-Virus periodically gives me the "A virus tried to do something, but I stopped it" pop-up message. The virus is always some random name.exe, and never the same one twice.] I have run the following: Spybot S&D (found and removed a bunch of stuff) Ad-Aware (found and removed some stuff) Panda Scan (found a ton of spyware, over a thousand files, according to the scan, but the free version wouldn't clean them) Windows ... Read more

A:Virusbursters - Leftover Problems After Removal

For added, reference, here's my rapport.txt after running a SmitFraudFix search.

SmitFraudFix v2.124

Scan done at 22:06:23.92, Sun 11/26/2006
Run from C:\Documents and Settings\Ed\Desktop
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

???????????????????????? C:\
???????????????????????? C:\WINDOWS
???????????????????????? C:\WINDOWS\system
???????????????????????? C:\WINDOWS\Web
???????????????????????? C:\WINDOWS\system32

C:\WINDOWS\system32\ot.ico FOUND !
C:\WINDOWS\system32\components\flx?.dll FOUND !
C:\WINDOWS\system32\components\flx??.dll FOUND !
C:\WINDOWS\system32\components\flx???.dll FOUND !

???????????????????????? C:\WINDOWS\system32\LogFiles
???????????????????????? C:\Documents and Settings\Ed
???????????????????????? C:\Documents and Settings\Ed\Application Data
???????????????????????? Start Menu

C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !

???????????????????????? C:\DOCUME~1\Ed\FAVORI~1

C:\DOCUME~1\Ed\FAVORI~1\Antivirus Test Online.url FOUND !

???????????????????????? Desktop
???????????????????????? C:\Program Files

C:\Program Files�... Read more

Read other 22 answers

I am getting the following error reportGeneric Host Process for Win32 Services has encountered a problem and needs to close.C:DOCUME~1MELOCALS~1TempWER5602.dir00svchost.exe.mdmpC:DOCUME~1MELOCALS~1TempWER5602.dir00appcompat.txtWhen I first realized I had a problem, AVG stopped working so I unistalled it and downloaded Spybot and ran that in Safe Mode. This seemed to repair some of the problem as it found many infected files. I reinstalled AVG. Ran that and it to found infections. I then had problems running certain things like disk defragmenter and task manager. Unistalled Spybot and installed Malwarebytes. This corrected almost everything. AVG is now telling me that my atapi.sys is infected and it can't do anything to it. Here is a list of what is in my AVG virus vault."Infection";"Trojan horse SHeur3.ARI";"C:Documents and SettingsMemvhasyvimk.exe";"";"2/28/2010, 3:23:08 PM""Infection";"Trojan horse BackDoor.Generic12.AMHS";"C:lsass.exe";"";"2/28/2010, 3:29:17 PM""Infection";"Trojan horse SHeur3.ATW";"C:WINDOWSTempiufg.tmpsvchost.exe";"";"3/1/2010, 4:41:17 AM""Infection";"Trojan horse FakeAV.SL";"C:WINDOWSsystem32sshnas21.dll";"";"3/2/2010, 5:32:06 AM""Infection";"Trojan horse FakeAV.SY";"C:WINDOWSsystem32_VOIDkdkxcqwpwc.dll";""... Read more

A:Have leftover problems from either a virus or malware

Thank you Pandy for getting me in the right forum. I am having trouble getting the rest of my reports to post.

Read other 12 answers

Hello, I have been trying to clean a friend's computer for a few hours now, the main problem was the Antimalware Doctor virus. I managed to finally get a clean scan from Malwarebytes, SuperAntiSpyware, and Ad-Aware (there were about 150 items caught on the first Malwarebytes scan, I have that log file if it is needed), but I'm still getting redirected when I do a Google/Bing seach on Internet Explorer and Firefox (Chrome seems to work just fine). So far the only thing I know for sure it is redirecting are "malwarebytes" and "antispyware doctor" keyword-related searches, even though I am eventually able to get to the site I want after a few tries. Occasionally I will get redirected from other searches, but the previously mentioned keywords seem to almost always get redirected three or four times to random ad-sites before I can access the site I want. I also ran ComboFix to try and fix some issues, but the redirecting problem remains.Any help on this is greatly appreciated.The HiJackThis and ComboFix logs are below, but here they are as attachments:
 hijackthis.log   5.8KB
 log.txt   15.32KB
  1 downloadsHIJACKTHIS:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 8:32:05 PM, on 4/4/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32 ... Read more

A:Antimalware Doctor Leftover Problems

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is... Read more

Read other 8 answers

I keep my computer pretty safe and secure, but recently I had a breakin and was confronted with the daunting task of Spy Sheriff taking over my desktop background.I took all of the steps needed to remove it, I believe, but now that I'm pretty sure it's gone, I'm not able to reset my desktop back. Here is my current HJT log.Logfile of HijackThis v1.99.1Scan saved at 11:11:42 PM, on 6/17/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Unable to get Internet Explorer version!Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\Program Files\Purdue University\Air Link\cvpnd.exeC:\Program Files\Ewiedo\Security\ewidoctrl.exeC:\Program Files\Common Framework\FrameworkService.exeC:\Program Files\McAfee\Mcshield.exeC:\Program Files\McAfee\VsTskMgr.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\BCMSMMSG.exeC:�... Read more

A:Spy Sherrif fixed, but problems leftover

Welcome berlinbm2004 to Bleeping Computer.Please read these instructions carefully. You may want to print them as we will perform most of this advise in safe mode. Be sure to follow ALL instructions!Open HijackThisGo to ?config?Go to ?misc tools?Press the button ?open uninstall manager?In the list find:SpySheriffPress ?delete this entry?.***Make sure you are disconnected from the Internet and that all programs and windows are closed. Run HiJackThis. Place a check next to the following items, if found, and click FIX CHECKED:O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O4 - HKCU\..\Run: [fBx9RTK3X] recunirl.exeO16 - DPF: {73F0FD85-BD47-4A95-86D1-DE38860462C1} - - DPF: {BFC9677B-8006-4336-9D49-2C797AEFCB9E} - http://akamai.downloadv3.com/binaries/EGDA...ESS_1058_XP.cabClose HiJackThis.***Delete the following, in bold, if found:C:\Program Files\SpySheriff <-whole folderC:\Windows\Desktop.htmlC:\winstall.exe***Copy everything inside the quote box below (starting with REGEDIT4). Paste it into Notepad. Go up to "File > Save As", then click the drop-down box to change the "Save As Type" to "All Files". Save it as fixspy.reg on your desktop. *Make sure there is NO blank line above REGEDIT4REGEDIT4[HKEY_CURRENT_USER\Software\Microsoft\Windo... Read more

Read other 3 answers

I?m working on (my father-in-law?s) pretty old Dell desktop.

He was hit with Internet Security 2011 malware. It gave me quite a hard time.

In desperation I went into the registry and deleted several entries associated with the malware as per a help site I found. I looked at a dozen different sites including bleepingcomputer.

Then I finally used a fresh copy of malwarebytes (downloaded on my own laptop and transferred over with a flash drive). I ran it but it didn?t seem to find anything. Perhaps because I had pulled out several components already.

I also ran combofix which seemed to help(?)

Anyway, I ran updated versions of malware bytes and spybot S & D. Spybot came up with a few items which I ?fixed? with spybot.

However, it looks like several of the programs, including Norton 360 are blocked. I was able to clear the block from malwarebytes using the cacls command.

I was not able to clear Spybot because I could not figure out how to type ?Spybot ? Search & Destroy? with the command prompt. I also am having trouble with Norton. ?and who knows what else may have been affected.

At this point I don?t know what?s left in there. I fear there may be ?pieces? of the original malware. Additionally, I need to correct all the permissions it changed and I?m not sure how to find them (and correct them).

I read the preparation guide, downloaded the files, moved them to the desktop and ran them and saved the logs.

BTW, the computer is not connected to the internet at ... Read more

A:leftover problems from internet security 2011

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please take note: If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic and do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the '... Read more

Read other 24 answers

Hi all.

One of my dad's friends was having a problem logging into Windows (initially all he had was the mouse pointer on an otherwise blank screen...). The problem was fixed, but when we eventually logged in, the antivirus, firewall and antispyware programs I originally installed were missing!

I reinstalled them, and ran them. AVG discovered a Trojan (I forget which strain it was), which was subsequently removed, while SUPERAntiSpyware (kindly provided by cybertech on a previous fix I had to do) found 111 threats (also removed).

I have the machine here with me so I can check it over further. I ran HijackThis so I can get your opinion on what to do next. Here is the log:

Logfile of HijackThis v1.99.1
Scan saved at 9:46:48 AM, on 6/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HijackThis\HijackThis.e... Read more

A:Solved: Checking for leftover problems on infected machine

Read other 14 answers


I tried installing Kazaa Lite, Kazaa or WinMX at work, and I am unable to get these softwares connected. We have a LAN with a firewall, and trying dfferent options on all of those softwares didn't help.

I tried Kazaa at home (will switch to Kazaa Lite tonight) and never had any problems connecting.

Can anyone tell me what should the settings be to allow me to go through the firewall and get connected?

Thanks a lot.


A:WinMX / Kazaa / Kazaa Lite connection problem with LAN

Read other 10 answers

Hi. Back when I was in college and my computer was in a networking lab, we had to keep file sharing on Kazaa disabled so that we were only downloading files but others were not uploading files. They did this because it was clogging up the network with too much traffic going to and from our lab. However, now my computer is at home and I have a dialup connection rather than a T1 connection. I get a full 52kpbs on each connection. Well, my question is this, if I enable file sharing so people can upload from me, will this slow down my download speed at all on Kazaa? I have also heard that the higher the participation rating you have, the better the downloads you get. Is this true? Well, thanks for any advice or answers you can provide in advance.

A:Kazaa file sharing and Kazaa download speed...

First things first are we talking Kazaa or Kazaalite?

If it is Kazaa, I suggest you uninstall it and install KAZAALITE instead, thus removing spyware which is going to limit your download speed still further

Regarding the participation rating, allegedly so, but with Kazaalite, this is overridden, so it is immaterial

Your download speed can be affected, but you can limit the number of simultaneous uploads

Read other 1 answers


I want to change from Kazaa to kazaa lite, run spybot and adaware in between and clean up my system.
I currently have a big file downloading and i'm about a third of the way through.
Does any one know a way i can make sure that i don't lose the half of the file i have already downloaded and that when i continue the download with kazaa lite i won't have to start the whole download again. I suppose the main thing will be getting kazaa lite to regognise the megabytes i have already downloaded.

I have kpe if that helps


A:Kazaa to kazaa lite, keeping part download

Read other 7 answers

I wonder if anyone might be able to help on this one:
I've used Kazaa before, and I just re-installed it to try again, but as before it is very slow and I find it very difficult to download much at all - my performance monitor shows that the CPU is 100% when kazaa is operational. Does anyone know of any settings that might improve performance?


A:Kazaa problems

Read other 6 answers

About 30 seconds after I launch Kazaa I get a illegal operation message. here's what it says when I click on details:

KAZAA caused an invalid page fault in
module KERNEL32.DLL at 018f:bff7a125.
EAX=01b738b0 CS=018f EIP=bff7a125 EFLGS=00010212
EBX=020b323c SS=0197 ESP=039cf4fc EBP=039cf53c
ECX=00610072 DS=0197 ESI=01b738b0 FS=191f
EDX=00100000 ES=0197 EDI=0053f98c GS=0000
Bytes at CS:EIP:
8b 03 a8 01 74 25 25 fc ff ff 0f 8b 53 08 03 f8
Stack dump:
039cf53c 0053f98c 01b7323c 00000674 bff7a3a0 01b40000 01b738b0 0053f98c 00000000 01b4000c 01b40000 01b7323c 00000000 00000000 000020b3 00001b74

I have no idea what any of this means so any help would be appreciated. If you need more info, tell me.

A:Problems with Kazaa

Read other 6 answers

HELP! I recently downloaded KaZaA. It worked fine for a few days, and now, when I start up the application, it tells me a run time error has occured, saying 'kDomain' is undefined. So, I start up the debugger, in my case, Microsoft Script Editor. From there, what do I do? Please help....thanks

A:Problems with KaZaA

Hi darkchyld98 and welcome to BCKazaa is a program with spyware bundled in. The best thing you can do is to try to uninstall it (you have to do that first) from Add/Remove programs and then run AdAware and Spybot S&D to get rid of the spyware left behind. Take a look at this page from SpywareInfo for a list of clean and infected P2P programs and get one that is clean.

Read other 10 answers

I have Kazaa version 2.0.2 running windows xp and tried to upgrade to the newer version of Kazaa. When I do I get a message saying that Kazaa is not supported by windows 95. Now I want to remove the program and get an error saying
error in c:\windows\system32\cd_client.dll missing entry: ServiceRundll. Does anyone have any clue to removing this program. I have had no problems in the past with Kazaa.

A:(Solved) Kazaa Problems

Read other 7 answers

I have been experiencing problems with my PC stemming (I think) from my son installing Kazaa on my computer. It has been installed for over a year, but about 2 months ago we started seeing a great deal of pop ups. At the same time, the System32 folder opens up every time at startup, whatever that is. I tried Pop Up Stopper to some success, and then heard about problems with Kazaa - which I uninstalled, to no effect. I have also used the free Spybot application, but am still seeing increasing issues with different programs on the PC (Outlook, script error messages, etc). I am ready to wipe the hard drive and reinstall the ops system.
Any thoughts?

A:Performance problems from Kazaa?

Read other 16 answers

I recently upgraded from kazaa to kazaa plus. the install required two downloads due to technical problems. At present I am unable to use the search or traffic options under view or on the toolbar. I am at a loss as to what to do. Your help would be greatly appreciated please keep it simple stupid I'm not a techie sorry

A:Kazaa plus stall problems


Like many others who post here - I would strongly advise you to get rid of Kazaa from your system due to the insidious spyware that is installed with Kazaa. You can do so with Kazaabegone available here :

http://www.spywareinfo.com/~merijn/ (Scroll down.)

Then go here :


Download Spybot Search & Destroy.
On install - run - click check for updates - get all updates - click check for problems - click fix all checked.

Then get the spyware free Kazaalite here :

http://kazaalite.host.sk/ - Just click the page that appears.

Read other 1 answers

no fire wall but still no per to per connetion can someone help me plz?????

A:Kazaa lite problems

Hi and welcome

Sorry but we do not support P2P here. It's against the rules.

Category I Offenses
Minor and Sometimes Unintentional Annoyances
P2P Instructions - The purpose of P2P is to illegally trade copyrighted material. We do not support the use of P2P networks and any threads requesting help for them will be closed. This includes Kazaa, Bearshare, WinMX, and the like. If you're interested in the topic, you are free to discuss it on our site (and please visit StealingIsIllegal.com), but information on how to use them will not be provided.

Read other 1 answers

I've had this weird Kazaa/Kazaa_lite launch problem for some time (i've have re-installed win2k for couple of times).
Problem is that when i click the Kazaa/Kazaa_lite (following goes for both) icon, the program loads for about 1 second, and then it stops. Nothing happens after that and Kazaa/Kazaa_lite wont start. Kazaa.exe icon appears for that second in the Task Manager, but disappears then. I dont have a clue whats wrong...WinMX works fine, but i'd prefer Kazaa..

System:WIN2K, SP2.

A:Kazaa launch problems

Hi ! firstly........


Would be better if you just used KaZaaLite version 2 if you are you using both ?

Also all previous versions would need to be uninstalled.

Scan for any spyware using

Keeping your reference files up to-date !

Could use

'Spybot' along side 'Adaware'

Good Luck !!

Read other 3 answers

Lately when i download songs,they play for a few seconds,and then something happens,it cuts off and makes noises it's just been happening lately.I have zone alarm could that be doing it? I'm at my wits end,that's why i came here!! Thanks!!!

A:Kazaa-lite problems!!

Read other 14 answers

Hey all
I am having problems with Kazaa Lite. Previously, I had version 1.72 I believe installed, and got bandwidth of up to 700 plus. I have DSL, so I expected this.

However, when I upgraded to version 2.0 (I went to the Kazaa Lite site, so I know it was the non spyware version) and the highest bandwidth result I got was 78.

So I decided to try version 1.72 again, and the highest I got was 94. No matter what I tried to search for, nothing higher then 94.

Finally, I uninstalled version 1.72, rebooted, and reinstalled. Now my highest bandwith is 54.

At that rate it'd take 10 minutes to download a song that normally took 20-50 seconds. What am I doing wrong? Why is my bandwidth so low all of a sudden?

Another question: My friend has cable modem, and he often gets download speeds of 120 kps plus, the highest I got was 70 kps. What is up with that?

A:Kazaa Lite problems

Read other 16 answers

I recently uninstalled Kazaa and downloaded Kazaa Lite. After installation, I had no problems what-so-ever, the program itself ran fine, and downloads worked great too. But through Kazaa, it will only play .wma files or .wav files, but no .mp3 files. This is a problem considering 98% of my songs are .mp3's. The version of K-Lite I am using is 2.1.0, which is based of of KMD 2.0.2. It also says that I have K++ version 2.0.3. I have no idea what K++ is, but I thought I'd tell you in case it can help you solve my problem. Thanks for the help.

A:Kazaa Lite Problems

You could just associate the mp3 file extensions with your prefered media player ie.. WMP, Winamp etc... whatever you have. The integrated player in Kazaalite is not that great anyway.

Read other 1 answers

Cleaning up computer I removed programs. Lost almost all desktop icons,all entries in start program. Many programs, including NAV, won't start (missing dlls).

Using XP I did a system restore and things were ok. I cleaned up computer again and same thing happened when I used add/remove programs to dump kazaa and associated programs (that was probably what caused it the 1st time-but at that time I did not realize it). Only now when I try to do a system restore, it will not work. Tried running Winsock fix.

Any suggestions.


Larry Halperin

Read other answers

I work at an ISP tech support, and in the last week there have been a rediculous number of calls where a user can't surf anywhere except of course our webpage because its hosted right here, i tell the customer to use winsockfix and the problem goes away.
The one thing these people have in common is that the ones i have worked on had kazaa on thier computer, which makes me suspicious, i know it comes bundled with various crapware but never have we had this volume of winsocks being destroyed. Is the newest version of kazaa or one of its piggyback programs now so poorly written that it causes this frequently, or maybe it is a conflict between two competing companies uninstalling eachothers crapware improperly? Maybe its something else, but its not our systems obviously, and its losing us customers because some people have set in thier minds from the start that "theres no possible way that could happen cuz i have norton updated" which really doesnt do jack for this because its not a virus, so they change providers and notify us afterward. The real kicker is after they change dialup providers the problem goes away.
The only reason i can come up with for this is that the provider's install cd reset thier winsock settings, which further stimulates thier belief that we suck.

This week something is in the air, and it stinks.

A:Possible New Kazaa related problems

Kazaa is third-party non-microsoft certified software and causes major problems corrupting Windows because, yes, it's so poorly compiled. Not the least of which, most folks have no firewall installed and they get tapped by hackers, crackers and other idiots. Users should be advised to install a firewall like free Sygate, colored link below, or in the case of WinXP, to enable ICF. The best thing is not to have CausA installed on your computer at all. Besides, it's mostly used for illegal activities.

It's likely not changing ISPs that helps them, most probably aren't saying the problem hasn't really gone away with ISP change.

Read other 1 answers

Kazaa lite -
every now and again when i try to start up kazaa lite i get the message "Can't find Kazaa Lite registry keys" then I uninstall Kazaa lite and re-install it and it works fine for a little bit - is my Ad-aware 6.0 or Spybot Search and destroy messing with the registry keys - or do i have to uninstall and install kazaa lite in order to use the program??

Kazaa -
I uninstalled Kazaa with Kazaabegone, but it was still on the Add/remove programs list - try to remove it there - it can't "C:WINDOWS\system32\cd_clint.dll" it's can't find these modules or nodes or whatever it is - I read one of your threads - installed Kazaa, then Kazaabegoned my computer - still not gone - then I downloaded your link http://www.cexx.org/cd_clint.zip
unzipped the file "cd_clint.dll" into C:\Windows\System and still it wouldn't remove it from my Add/ Remove programs - is Kazaa going to stay in my computer forever??

A:Kazaa lite (start up) and Kazaa (removal)??

Sorry but I don't get it! You got both Kazaa and Kazaalite???!

Read other 2 answers

I recently downlaoded Kazaa Lite K++ 2.4.1 . I had previously been using Kazaa Lite 1.7 (or thereabouts). I have a DSL modem.

With v 1.7, I could download files fairly quickly at resonable speeds (ie. at least 2.5 kb/s). With version 2.4.1 all of my downloads are at speeds WAY below 1 kb/s and take FOREVER to get. I'm downloading some of the same files as before, so there really shouldn't be a difference. Where could the problem be?

PS - I don't really understand the whole K++ thing and the priority levels. Could this be the problem?

A:Kazaa Lite K++ giving me problems.

Hi there,Im sure you know that the speed of download depends on the bandwidth you get from the member you are downloading from, make sure you get the highest bandwidth from your searched list,might also be your ISP having problems of course,failing that,why not go back to your previous version if it was doing ok?

Read other 2 answers

I am having problems searching in kazaa lite. When i press the search button, kazaa automatically replies that there were no results. I also noticed that when I am connected to kazaa it says that there is one user on line with the amount of files I have shared equal to the total amount of shared files. what is going on and what can I do to fix it?


A:kazaa lite search problems

The forum doesn't deal with p2p file sharing programs due to its legality issue..

Read other 2 answers

I uninstalled kazaa lite because it was not working quite right and went to reinstall the latest verson and got the following errors during intallation:

"Error Creating Registry Key:

RegCreateKeyEx failed; code 5.
Access is denied"

and if I ignore that error the follwing error comes up next

"Error Creating Registry Key:

RegCreateKeyEx failed; code 5.
Access is denied"

Even if I ignore all the errors Kazaa wont start. I don't know what to do next? I am logged in as the administrator. I have windows xp pro. Any help anyone could give me would be greatly appreciated.

A:Kazaa Lite Registry Key problems

Anyone have a suggestion on where I could find more info on installing kazaa lite?

Read other 1 answers

Hey guys, on my win xp I have multiple accounts set up and they are all limited accounts except for mine cause I'm the account administrator. On my account kazaa works fine and all but when I go to their accounts I open kazaa and and I get an error message saying.. Unable to open C:\Program Files\Kazaa\Db\data1024.dbb . I opened up the kazaa folder and the file is their just kazaa is not opening it for some reason on the limited accounts. Do you know what is happening??


A:Kazaa problems with limited user account on Win xp

I've had that problem to. I assume It's cuz limited users just don't have enough privilages for Kazaa to operate properly. What I'd recommend instead is you download Kazaa-Lite from kazaalite.nl and install with administrator privilages then try running that under limited user accounts. That should work. Download it from kazaalite.nl cuz it comes with hacks like always keep participation level at 1000 and more...

Good luck,


Read other 1 answers

I'm not real good with this stuff, but i downloaded counter-strike for my pc from kazaa lite and it istalled fully. i cant seem to get into the game though, it made a short-cut icon too. the only thing is it wont let me enter it, when i click on the icon all that happens is it goes to the browser mini screen becuase it cant find a suitable program to run it... any idea's what has happened wrong?

thanks thanks thanks!

A:Solved: Counter strike-kazaa problems!

Read other 16 answers

kazaa vs kazaa lite

i currently use and happy with kazaa lite,occasionally i cannot find downloads i would like.

does the more popular kazaa offer more files to download?

A:kazaa vs kazaa lite : available downloads?


Read other 3 answers

kind of a noobie question but I will likely be creating a bunch of mp3s from audio cassette. If I wanted to have them available for everyone to have all I need to do is place the mp3 files in my kazaa shared folder? Also wondered how long they would need to be there until they propagated out enough so I could delete them.

As for the problem:

Just recently every file I download from kazaa (lite) comes up showing 'queued' as status. I need to do a 'resume' on all of them. I have the amount of files allowed to download set to 50 and I am nowhere near this number. Once I do a release the files download or show more resources but it is a pain.

A:uploading to kazaa & a kazaa problem

Files dont propogate. They must be downloaded and in the shared folder of someone that is online, or they can not be downloaded by anyone else.

Read other 3 answers

I heard something recently about Kazaa bundling some sort of 3rd party software, in addition to the normal adware, that uses your system for processing tasks or something along those lines. Not totally sure, but it was something that sounded intrusive and unwanted.

I have Kazaa Lite, the adware is removed, but I'm wondering about the other stuff.

Anyone have a good descrption of what that other stuff is, and if Kazaa Lite has it? I only heard a brief little bit of info about it, never got a good understanding.

A:Kazaa and Kazaa Lite

Here is a link that explains it pretty well. They do mention as you will see that it is now more adware than spyware. Hope this helps.

Read other 2 answers

does anyone have both of these software at the same time? or had both?

i am wondering if kazaa is better than kazaa lite, like does it have better search results and download speeds etc ?

A:kazaa and kazaa lite

Read other 16 answers

hey guys. I have peerguardian 2 and everytime i start my computer someone called offeroptimizer.com/static.callinghome.biz[spy], st. also i was looking with spysweeper at my items that startup with windows and i noticed there is something called ShowWnd.exe and i googeld it and some things said it was malicious and some said it was not. Maybe you could help me out. Heres my Hijackthis log. Thanks.Logfile of HijackThis v1.99.1Scan saved at 4:20:18 PM, on 5/25/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Norton Internet Security\ISSVC.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files&#... Read more


Welcome leftover to Bleeping Computer.*Restart the computer.*as soon as BIOS is loaded begin tapping the F8 key until the Advanced Options menu appears.*Use the arrow keys to select the Safe mode menu item*press Enter.***We need to make sure all hidden files are showing so please:* Click Start. * Open My Computer. * Select the Tools menu and click Folder Options. * Select the View Tab. * Under the Hidden files and folders heading select Show hidden files and folders. * Uncheck the Hide protected operating system files (recommended) option. * Click Yes to confirm. * Click OK.***Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exeClick on Fix Checked when finished and exit HijackThis.***Open Windows Explorer.Find and delete this file:C:\Windows\System32\ShowWnd.exe***Reboot the computer to normal mode.Please post back in this topic with a fresh log using HijackThis.

Read other 16 answers

Can anyone tell me if there is such a progamme that can detect leftover programmes on the pc. By that I mean, when you have installed a programme and then decide you don't want it, you delete it from the add/remove control but it always seems to leave some file behind.

Is there anything that would clean all those files up? Hope I am making sense.


A:Leftover files?

Read other 14 answers

After finally getting the Windows 10 Anniversary Update to install, as expected, I had a WIndows.0ld file. Following instructions posted here and elsewhere, I used Disc Cleanup to remove most of that file.

There are still two folders remaining in Windows.old from System32, one in Drivers (IntcDaud.sys) and one in DriverStore (intcdaud.info.amd64xxxxx.) When I go directly to System32, both drivers appear in the same folders where they show in Wndows.old. Disc Cleanup no longer even recognizes Windows.old, so I cannot run it again to remove what appear to me to be extraneous entries.

Can I safely use Unlocker to try to remove the remaining Windows.old file, which likely would only work after a reboot? If not, is there some other method, short of using the Jaws of Life or a ten-pound sledge hammer to remove the leftover Windows.old file?

A:Windows.old leftover

Hello Not Myself,

Unlocker should work for you. If you like, OPTION THREE below should work as well.

Windows.old Folder - Delete in Windows 10

Read other answers

I got some kind of malware last week. I kept getting tons of pop-ups, which never bothered me before, and other things. One of those fake anti-spyware sites that took over my computer till I shut it down, etc.

So in the past week I have done the following:

I ran Stinger, Ad-Aware, Malicious Removal Tool, CC Cleaner, Housecall, HS Remove, cwshredder, Kill2Me, all of which found nothing, and did a System Restore which had no effect..

Then I ran Malwarebytes and Stopzilla both of which found some Trojans, Malwares, Ad cookies etc and deleted them. (No worms that I could see.)

Since then I still have the following problems:

When I load Firefox - before the page loads in the upper left hand corner I get the following box:

"Java Application Type Error: spElement is null." (A search of "spElement is null" on Google turns up nothing.)

When I click OK, the message box disappears and Firefox loads. Sometimes a few different pages load, Ask.Com, My * 10.Com, etc. A couple pages sometime try to load but there is a message box that says the locations couldn't be found. I click off those pages, I seem to be able to use Firefox without any further problems.

If I try and load Internet Explorer, a bunch pf pages try to load, all with the same internet address with numbers, letters, and symbols that I have never seen before (not a foreign language, but symbols which aren't on my keyboard, letters, etc) Luckily for each page that tries to loa... Read more

A:A few leftover's that I can't seem to shake??

I would do the following.....Use Rkill to stop the rootkit processes that start when the computer comes on. Then I run the Malwarebytes and SUPERAntiSpyware. Here are some DL links for the Rkill....LINK 1LINK 2LINK 3LINK 4Save it to your desktop and then double click to launch it (With Vista you need to right click and select run as administrator). You should see a little black window open and then close. If you see that box then it worked. If you don't see the black box then delete the file and use another download link and repeat the steps.After running Rkill update and run MBAM. Next I would install AFT Cleaner check the box for select all and then run it. Finally, I would run SUPERAntiSpyware. If you have more than one username then you will need to scan each user account seperately with this.

Read other 1 answers

thank you for helping me,

Here is where we were working on Internet Explorer issues before I was told there was leftover malware items> http://forums.techguy.org/windows-xp/949714-internet-explorer-problem.html#post7597460

i ran the uninstaller then did the hijack this scan again.
i didn't see the two items you said i should check mark on the list.. so i looked back at the first log and they are listed, but now after the uninstall they are gone. because im not sure what to do, i didn't do the Norton uninstaller part yet.. this it the latest file after the uninstall.

i also noticed that when i would open any file the Search Settings v1.2.3 tried to open every time, and i had to hit the cancel button several times to close it. now that I've done the uninstall, it no longer does this. im guessing they are related somehow and i hope that this new information doesn't come too late..
thank you again for your help.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:40:46, on 9/13/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\... Read more

A:Leftover infection

Search Settings seems to be gone alright.

As for Norton, it should be removed since you should never run more than one antivirus software at the time. They will work one against the other (Avira and Norton), cause your system to be slow and even freeze. Your computer will be even more vulnerable.

Your log is showing traces of past or present infection. After we're done here, we'll need to get you transfered to the Virus & Other Malware Removal forum.

Read other 1 answers

Hi I need help getting rid of some trojan/malware remains. Malwarebytes and tdsskiller don't find anything but I am still getting internet explorer redirects, windows firewall turned off & will not turn on and need help because it looks like I may have a rootkit hiding somewhere. I have included my dds files. Also avast is showing alot of "malicious URL blocked" messages and the process is C:\Windows\System32\ping.exe. I have ESAT, MBAM, SAS & HiJackThis logs. I have combofix, aswMBR & minitoolbox dl'd & ready to run but don't want to use them without your direction. I have windows 7 32 Thanks!

A:Win7Antispyware leftover fix

Update......running eset fixed the redirects but I wonder if I still have the rootkit. Eset said I had a variant of the Win32/Sirefef.DN trojan.

Read other 19 answers

HI, i removed a security program,and i now find that i have leftover files, i went into task manager found file location, but when i try to delete them, a popup say's i need permission. i am the only user on the pc and also administrater how do i obtain permision or is the another way to delete. i have vista premium 32-bit...thanks

A:Get rid of leftover files

Hi patch41, Take ownership of that file and then delete it.

Read other 5 answers

My old EIDE WD Caviar200AA is in a box.It was in a Compaq p.o.s.that died,last march.
My new" no-name" is running NTFS. and has 80 Gb Hdd.
How much hassle to add additional" slave" drive to new machine?
what are the snafu's out there? How do I start?
btw I'm new at this

Is the ole' 5600rpm drive seemingly tons slower than my 7200 in practice?

Can any of the fat32 stuff be left on that 20Gb or does it all have to be wiped?

A:should I install a leftover second- harddrive,20G

Read other 8 answers

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:20:52 PM, on 4/24/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\WINDOWS\system32\ezSP_Px.exeC:\Program Files\Verizon\McciTrayApp.exeC:\Program Files\ATT-SST\McciTrayApp.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Motive\McciCMService.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Viewpoint\Common\ViewpointService.exeC:\WINDOWS\wanmpsvc.exeC:\Program Files\Linksys\WUSB54GSC\WLService.exeC:\Program Files\Linksys\WUSB54GSC\WUSB54GSC.exeC:\WINDOWS\system... Read more

A:HJthis log - still have viruses leftover?

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

Read other 2 answers


Now that I seem to have removed my root-kit I now wish to figure out how to remove what is leftover from a Virumonde infection that I had last year. I am no longer infected, but have 2 calls for dll files that are left in the registry, and cause an error on system start, generating error boxes. I am simply tired of them, but had to get my other issues taken care of first.

Hijack This and MB both allow me to delete the registry entries for both dlls, but they keep reappearing. I have researched this, only to find that it has something to do with the system restore function in XP. That doesn't make sense to me as I have turned system restore off, and it still happens. That leads me to believe that this problem is coming from somewhere else, but I have no idea how to track it down.


A:Leftover Virtumonde trash

Read other 16 answers

So I contracted Smitfraud-c, as named by Spybot, and like everyone else I couldn't get it off. My computer was just going nuts; adding desktop icons, opening my browser, countless prompts ostensibly notifying me of spyware removal tools, and actually running these fake programs. I tried a few smitfraud cleaners and other recommendations to no avail.
Finally I tried using HJT to "delete a file on reboot.." and deleted the dll associated with smitfraud-c. I think I determined the dll file with the SpybotSD recovery listings following a scan, or something like that. Anyway, after I did this SpybotSD was actually able to delete the Smitfraud-c object. After numerous scans with all of my clean-up tools, they are no longer picking up any more malware.
I was happy about this, however things still arent completely right: Boot-ups take a long time (malware is starting up and initiating its hijack, I think), my home page keeps changing, and I'm pretty sure I'm seeing browser hijacker entries in my HJT log.
Security and cleanup tools that I use: SpybotSD, AdawareSE, Spyware blaster, AVG, windows firewall, CCleaner, RegCleaner, Windows disk cleaner and every now and then I'll run rootkit scanners. Here's my HJT log:

Running processes:
C:\WINDOWS\System32\svchost.e... Read more

A:smitfraud-c, leftover stuff

Read other 12 answers