Over 1 million tech questions and answers.

Help Please..file is dirty, deleting index entry, recovering orphaned file

Q: Help Please..file is dirty, deleting index entry, recovering orphaned file

I would appreciate any assistance I could get, it seems I have an issue...Thank you so much in advance!

Computer is running slowly but seems to be processing constantly, freezing up when opening certain on-line sites. This has been occuring for a few days and I downloaded and ran TFC and Malwarebytes without any success. Run AVG free also. Tonight it froze and I powered it down at the power strip and upon restarting it went to a light blue screen and indicated the following (this is just parts of what the screen displayed)....

"File is dirty"
"Deleting index entry...listed multiple file #'s"
"CHKDSK is recovering lost files"
"Recovering orphaned file...then listed directory file #'s"
"CHKDSK is verifying security descriptors...."

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) D CPU 2.80GHz, x86 Family 15 Model 4 Stepping 7
Processor Count: 2
RAM: 1022 Mb
Graphics Card: ATI Radeon X300/X550/X1050 Series, 256 Mb
Hard Drives: C: Total - 233075 MB, Free - 206970 MB;
Motherboard: Dell Inc., 0HJ054
Antivirus: AVG Anti-Virus Free Edition 2011, Updated: Yes, On-Demand Scanner: Enabled

Logs are attached. Thank you again!

Preferred Solution: Help Please..file is dirty, deleting index entry, recovering orphaned file

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Help Please..file is dirty, deleting index entry, recovering orphaned file

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:05:10 PM, on 12/5/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17103)
Boot mode: Normal
Running processes:
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alltel\QuickLink Mobile\QuickLink Mobile.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Theresa Gingrich\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Swag Bucks - {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\prxtbSwa2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Swag Bucks Toolbar - {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\prxtbSwa2.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [MBMon] Rundll32 CTMBHA.DLL,MBMon
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {28B66320-9687-4B13-8757-36F901887AB5} (CanvasX Class) - http://www.seehere.com/ips-opdata/layout/fujius02/objects/jordan-canvasx.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1156568420687
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1252614477984
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{141C92E8-BCB3-42C4-B29A-A60535216CBC}: NameServer =
O17 - HKLM\System\CS1\Services\Tcpip\..\{141C92E8-BCB3-42C4-B29A-A60535216CBC}: NameServer =
O17 - HKLM\System\CS2\Services\Tcpip\..\{141C92E8-BCB3-42C4-B29A-A60535216CBC}: NameServer =
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: CopySafe Helper Service (CSHelper) - Unknown owner - C:\WINDOWS\system32\CSHelper.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: LiveShare P2P Server (RoxLiveShare) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe (file missing)
O23 - Service: RoxMediaDB - Unknown owner - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe (file missing)
O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe (file missing)
O23 - Service: RoxUpnpServer - Unknown owner - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe (file missing)
O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe (file missing)
End of file - 11457 bytes
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 7.0.5730.11
Run by Theresa Gingrich at 22:14:50 on 2011-12-05
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.670 [GMT -5:00]
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alltel\QuickLink Mobile\QuickLink Mobile.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
mURLSearchHooks: H - No File
BHO: Conduit Engine : {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\prxConduitEngine.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: RoboForm: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - c:\program files\swag_bucks\prxtbSwa2.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
TB: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - c:\program files\swag_bucks\prxtbSwa2.dll
TB: Conduit Engine : {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\prxConduitEngine.dll
TB: &Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
uRun: [SetDefaultMIDI] MIDIDef.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [CTSysVol] c:\program files\creative\sbaudigy\surround mixer\CTSysVol.exe /r
mRun: [MBMon] Rundll32 CTMBHA.DLL,MBMon
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot
mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\documents and settings\theresa gingrich\start menu\programs\startup\PowerReg Scheduler.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {28B66320-9687-4B13-8757-36F901887AB5} - hxxp://www.seehere.com/ips-opdata/layout/fujius02/objects/jordan-canvasx.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1156568420687
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1252614477984
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
TCP: Interfaces\{141C92E8-BCB3-42C4-B29A-A60535216CBC} : NameServer =
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34896]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 297168]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-8-18 7390560]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2011-2-8 269520]
R2 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2010-6-29 266240]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 27216]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [2009-9-10 18688]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [2009-9-10 8320]
R3 motport;Motorola USB Diagnostic Port;c:\windows\system32\drivers\motport.sys [2009-9-10 23680]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\superantispyware\sasdifsv.sys --> c:\program files\superantispyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\superantispyware\saskutil.sys --> c:\program files\superantispyware\SASKUTIL.SYS [?]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2009-10-6 18560]
=============== Created Last 30 ================
2011-12-06 01:55:53 -------- d-sh--w- C:\found.000
2011-12-05 23:17:42 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-12-05 04:51:13 -------- d-----w- c:\windows\system32\wbem\Logs
2011-12-03 06:26:22 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-12-03 06:05:25 -------- d-----w- c:\documents and settings\theresa gingrich\application data\Toolbar4
2011-12-03 06:05:22 -------- d-----w- c:\program files\DealBulldog Toolbar
2011-12-03 05:58:22 -------- d-----w- c:\program files\Temp File Cleaner
2011-12-03 05:32:38 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
==================== Find3M ====================
2011-12-03 06:25:58 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 15:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 15:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 15:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
============= FINISH: 22:15:14.56 ===============
GMER - http://www.gmer.net
Rootkit quick scan 2011-12-05 22:32:31
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-f ST3250824AS rev.3.ADH
Running: GMER.exe; Driver: C:\DOCUME~1\THERES~1\LOCALS~1\Temp\uwrdipog.sys

---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
---- EOF - GMER 1.0.15 ----

Read other 1 answers

So a few hours ago chkdsk was run suddenly I don't know why but I let it run anyways, so once it performed steps 1 & 2 it went on and on about "recovering orphaned files" and what I got from the last few hours was an ever growing list of recovered o-files at least right now this is what I'm getting
"Recovering orphaned file $RHEOHV3HF.jpg (706013) into directory file 6771"
Over 700,000+ jpgs recovered all named like "$Rxxxxxx.jpg" and as of right now it's still going and I don't think it will stop soon and I don't want it to stop, not now but a long while ago after when it started I recognized some file names that I know what they are and what happens if one comes along to be recovered later? Anyways what should I do? What do all these jpgs mean and why are there so many?

A:Recovering orphaned file

Why are there so many - probably because the hard drive is failing and that's why so many files are getting damaged. The JPG files are digital photographs. You need to save as much data as you can, then replace the hard drive with a new one.

Oh, and that's why it's so important to keep at least one backup copy of all your pictures and other stuff on a separate hard drive because they can fail at any time, and you might not realise it until it's too late to save anything.

Read other 2 answers

My computer has been slowing down a lot. I did a re-start and got a blue screen. The only option I could figure out was to push the power button on the tower. It turned off and I waited a minute and pushed it again, hit f8 and got it into safe mode. Did a chkdsk and scheduled a chkdsk/f for the next re-start. I re-started, the chkdsk/f started and
in part 2, I saw "recovering orphaned file ntuser.tmp 22258 into directory file 98980".
The computer then worked for another week or so but was still somewhat slower than I am used to. I got the blue screen again and had to perform the same operation and
received the same "recovering orphaned.........." as before. I don't know how to proceed or what I am doing wrong. Please help.

A:recovering orphaned file on chkdsk

Try a CHKDSK /R from safe mode. This will run a block check and move recoverable data to a safe place on the hard drive, and mark unsafe areas as "bad" so the OS doesn't try to use them again.

Read other 3 answers

My computer will not get past this message "Recovering orphaned file 0008 (167412) into directory file 167400.

I've tried restarting my computer in safe mode, but it always goes to check disk to do a repair, but stops at the same place. I went to sleep last night with it stuck there (hoping it was just a long process), but nothing happened overnight. I went to work and left it there, but nothing again.

Anything I try to do always takes me to checkdisk which always freezes at the same point. Can anyone help?

This all started yesterday afternoon. While I was on my Yahoo homepage, I noticed my scrolling was a little jerky. I thought I would shut down the computer and restart it. After 30 minutes, the computer still hadn't shut down, so I turned it off at the power button. I haven't been able to startup since.

Thanks for any help you can give.


A:Recovering Orphaned File 0008 (CheckDisk)

Hello Dwayne and welcome to the forums

Have you tried booting in safe mode? And have you got a Vista installation disc?


Read other 16 answers

My sister's Toshiba laptop has been in "recovering orphaned file" mode for 24 hours. Is this normal? What should she expect to happen? She has Windows 7, and any answers you can give us would be very appreciated! Thank you!

A:Solved: Recovering orphaned file problem

Read other 6 answers

I ran a chkdsk on a vista machine and this came up, any ideas what they are or how to fix them ?

index entry iedvtool.dll in index $130 of file 453 is incorrect

index entry iexplorer.exe in index $130 of file 453 is incorrect

index entry wininetplugin.dll in index $130 of file 4103 is incorrect

There is 2 other errors now, the ordinal 459 could not be located in the dynamic link libary urlmon.dll & BHO.DLL but they werent in the chkdsk errors in the cmd

Read other answers


Yesterday a storm was rolling by with high winds and heavy rain, and of course while my computer was on the power went out. Now when my computer got to a certain point during the start-up this appeared.

"Checking file system on C:
The type of the file system is NTFS.

One of your disks needs to be checked for consistency. You may cancel the disk check, but it is strongly recommended that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
File record segment 25336 is unreadable.
File record segment 25337 is unreadable.
File record segment 25338 is unreadable.
File record segment 25339 is unreadable.
File verification completed.
CHKDSK is verifying indexes (stage 2 of 3)...
Deleting an index entry from index $O of file 25.
Deleting an index entry from index $O of file 25."

Now I am not sure if the $ is followed by a "zero" or a "capitol O" If this matters please correct me.

My question is what was it deleting? Can I find out exactly what it deleted? Is there something in the Event Viewer that can show me what was deleted?
Another thing to add is that CHKDSK never completed checking and deleting, I keep skipping it during startup and the only reason I do this is because I don't know what is being deleted. The only side effect the computer is suffering from skipping CHKDSK is the desktop loading slowly.

Also after searching "File record segment xxxxx is unreadable." and "Deleti... Read more

A:Deleting index $O of file 25. Deleting what?

Read other 12 answers

''Deleting an Index entry with id 282 from index $sdh of file9''
This happened just as a home made DVD was placed in the cd drive. the drive is dvd readable. the computer has not been able to log on ...
the above message came up 17 times and it is doing scandisk 5 out of 5 times.

any ideas?

A:Deleting Index Entry at startup

Read other 8 answers

When i boot my notebook, the scandisk starts (because the comp was hard shut down a few days prior, because of a complete system freeze)

The scandisk runs and says it must delete an index entry:
"Deleting an index entry fron index $0 of the file 24568"

This line appears a couple times a second running down the screen, after waiting half an hour nothing has changed that line still keeps coming back...

I reboot and skip the scandisk at the beginig and it works fine, though i would like to fix this problem at the begining...

Any suggetsions?


A:scandisk when booting, failing when deleting an index entry

Read other 6 answers

I would like to know if I can delete all orphaned file/path references,shared DLLs,help file references,application path and activeX control references detected by my disk cleaning tool.Will it cause any harm to my PC after deletion?Thank you for your advice.

A:Orphaned File References???

I would not simply delete them, but move them to a hold folder. And then use the PC for a few weeks to see if any of them were really needed.

Read other 1 answers

Hello everyone:

Please someone -- can anyone help -- I have noticed a problem on one of my computers, which uses Office 2007, that when i attempt to do anything on my virtual machine (which uses Office 2003) within excel, invariably the file gets corrupted. I am not sure why this happens, because it doesn't always happen right away. However, after creating a file on my VM and then it gets saved on my regular machine, either after a few sessions or immediately, i get the error "file format not valid". I have spent over two weeks on this file (yes, using it everyday and saving/opening with no problem up until yesterday) and it has a lot of critical, non-sensitive data. I have tried calling my helpdesk (they were of no help), tried saving the file as *.xlsx, tried opening in word and wordpad (I could see some data -- but not all the critical data was there). PLEASE -- I have already bought one of those Recovery tools (which didn't get even 50%, or at least the critical updates i made yesterday). I can't afford to spend more -- is there anyone who would be willing to help a lost soul get this data back??? I have attached the file

Read other answers

Hi, I am Something Happened, cause something happened. My PC (which is a windows 7 professional by the way) decided to BSOD and it went to a random screen and about a minute or two after it started to say "Recovering Orphaned File." over and over again, also it said it was checking something in C: NTSF

Read other answers

Hi, I recently lost 20 avi files on my external hard drive (WD My Passport). The next time I started my laptop Vista started to scan the drive and then said it was 'Recovering Orphaned Files,' it got 3 of the avi's back and I'm now wondering is it possible to get them all back or would those be the only three left? Thanks!

A:Recovering Orphaned Files?

try using some free recovery utility - recuva or other if want

Read other 1 answers

in a recent thread i asked for help on how to get chkdsk to run....the only way i could get chkdsk to run was using hirens boot cd, i used the chkdsk c: /f /r command from the command prompt in hirens,
this started chkdsk right away without any problems,
the entire process (i believe it was 5 different steps) took about 3-4 hours to complete,
for a good 30-60 mins all i was seeing on the screen was.......
recovering orphaned file xxx into directory file yyy
the xxx were numbers that changed on every line, the yyy was a number that seemed to stayed consistent,
these commands were scrolling up the screen like a bat out of hell i would say at the rate of 10-20 per second, so fast i could barely see the numbers changing, this took a good 30-60 mins,
i have been getting a few corrupt file errors recently which is my reasoning for running chkdsk,
does it sound like this hard drive is on its way out?

A:Chkdsk - recovering orphaned files

To open Event Viewer, click Start > Control Panel > Performance and Maintenance > Administrative Tools, double-click Event Viewer
The Event Viewer window opens and in the left hand column click the arrow next to Windows Logs.
Highlight the Application Sub directory and after a minute or so (depending on the size of your log) the center portion of the screen will populate with Application Events.

The Level, Date & Time, Source. Event ID and Task Category are displayed. The easiest way I've found is to sort  the events alphabetically by source.

Look for WINLOGON under the Source heading

There may be multiple WINLOGON entries found, so check each one. The General tab will display information about the event highlighted.

Look for something like...
CHKDSK is verifying files (stage 1 of 3/5) the # of stages 3 or 5 depends on the switch(s) you assigned chkdisk when you issued the command.
To create a report for later reference...

In the displayed window under the General tab, highlight CHKDSK and press <Ctrl> + <A> to select all text within the window. Press <Ctrl> + <C> to copy. Open Notepad press <Ctrl> + <V> to paste the text.
Save it to your desktop as checkdisk log.txt or any name you wish to identify it by.
Now you have time to read all the details of your Chkdsk effort. You also have a log you can post if requested!
Feel free to post the log... I'd like to see it.
At th... Read more

Read other 2 answers

I am running Vista Business. It is installed on a Raid 5 with 4 Hdd's. They are each 250g partitioned into 2 drives. One being C: (100g) for vista and programs, the other holding the rest of my information. Heres the problem-

When I boot up the computer it goes straight into Check disk. I am not able to press any key to cancel. It starts recovering the orphaned files that I need very much!! (Wedding pictures) So it says recovering wedding_88.jpg. It got to this WE8306~1.jpg and then it locked up. So I rebooted and it went into check disk again but this time locked up right at the beginning of the check disk with the file name WE8306~1.jpg.

Anyone have any ideas on what to try?

A:Emergency! Recovering Orphaned Files

Read other 14 answers

From what I have read, my HD is probably going bad.
Recently, I have had some file corruption that has caused Windows 7 CHKDSK to want to run on boot-up. I have let it run several times overnight but it stopped after stage 2 of 3 and would not progress any further. So, I turned off the power and re-booted skipping the CHKDSK option so I could use my machine.
After getting a registry-fix program, there were many registry files shown as missing, so the program repaired them. I then re-booted and allowed the CHKDSK to run. It finally passed stage 2 of CHKDSK and is now recovering orphaned .jpg files for the last 60+ hours (over 1,400,000+ files) and shows no sign of when or if it will ever complete. I have seen others complain about 2 to 3 hours and even one person say it took 21 hours, but this is ridiculous!
I am assuming the best advice is just to keep letting it run and eventually it will complete? Hopefully, this will be in my lifetime!
If and when I can reboot, sensing that the HD is failing, is it still OK to get an image of the HD to use on a new laptop? I don't want to lose my programs and still prefer to keep my Windows 7 OS on the next one.
Just looking for advice.

A:Recovering Orphaned Files Taking Forever!

FYI: Even the legitimate free Registry Cleaner/System Optimizer programs are not to be trusted as they can and do make mistakes. All a cleaner does is remove orphaned registry keys and broken links, all too often they remove something your software or Windows needs to operate normally. You should never edit the registry unless you really know what you are doing and certainly should not trust any third party item of software to make any changes to it. The registry can operate without any noticeable drop in system performance even if it has 1000's of orphaned registry keys and you are very unlikely to notice any difference if you remove them. If there is a genuine problem in the registry it needs to be diagnosed by someone who knows what they are doing, both to correct the error and more importantly to find out what caused it.

All of the free Registry Cleaner/System Optimizer programs come bundled with Adware that will infect your browsers, causing redirects and/or pop up adds to appear. Some of these programs are borderline scams that will show hundreds of problems with your system and demand payment to have them removed. Don't believe a single word of all the hype, these types of programs are bad news for your PC, they are of no benefit and you won't find a single person with good PC knowledge that will recommend there use.


As your system has prompted a disc check to run that is a bad sign that the hard drive is failing and with the disc chec... Read more

Read other 1 answers

my computer was infected with Hackroot.Rootkit trojan. this threat was detected by Symantec AntiVirus. the file C:\WINDOWS\System32\DefLib.sys was listed as infected.

i clean this threat following the instructions in this topic: http://forums.techguy.org/malware-removal-hijackthis-logs/608328-hackroot-rootkit.html. after that i get a log file.

is everything all right with my system?

here the log:

SDFix: Version 1.100

Run by [...] on 28.08.2007 at 14:03

Microsoft Windows XP [&#1168;&#1072;&#1073;&#1025;&#1087; 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


%SystemRoot%\System32\svchost.exe -k netsvcs
%SystemRoot%\System32\svchost.exe -k netsvcs

FCI - Deleted
SysLibrary - Deleted
cb21738332 - Deleted
sb55552332 - Deleted

Infected ip6fw.sys Found!

ip6fw.sys File Locations:

"C:\WINDOWS\system32\drivers\ip6fw.sys" 3584 23.08.2007 12:39
"C:\WINDOWS\system32\dllcache\ip6fw.sys" 29056 18.08.2004 12:00

Infected File Listed Below:


Trojan File copied to Backups Folder
Attempting to replace ip6fw.sys with original version...

Original ip6fw.sys Restored
Restoring Windows Registry Values
Restoring Windows Default Hosts File

Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\system32\eudcedit.dll - Deleted
C:\DOCUME~1\VALERI... Read more

Read other answers

Rebootedmy laptop after latest Windows 7 updates. While closing it started installing latest service pack. Next time I looked at screen it had gone to a black screen scrolling white text. Each line is 'Recovering orphaned file xxxxx into directory xxxxx' has been doinng this continuously for an hour now with 2 or 3 occasional half second pauses. Any ideas what is happening and what I should do next?

A:Windows 7 update crash now getting recovering orphaned files


IT is running chkdsk, which means your filesystem is corrupted.

Read other 3 answers

Hi all,
I turned on a client PC this morning and this error popped up on start up of the machine, It won't boot into windows, this is all that displays on the screen.

'inserting an index entry into index $0 of 4441'

I have no idea what it means and I need to get the computer up and running as soon as possible..

Any help would be greatly appreciated,

Many Thanks

A:inserting an index entry into index $0 of 4441

Hard drive error. Left long enough it might boot otherwise I would boot to a live CD and see if you can recover any data, then wipe the disk and test it before using again.

Read other 2 answers

This is my first 'post' onto the bleepingcomputer.com site; and coudl really use a bit of help. I am having trouble with deleting the ~e5d141.tmp file and it's other associate files that regenerate, once I go into safe mode, and attempt to delete the file from, local setting, temp, and there it resides. I have checked other posts regarding this problem, and haven't really found a solution.
I am posting a hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 4:31:12 PM, on 3/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Fi... Read more

A:I'm Having Issues With Deleting The File " ~e5d141.tmp File And Other Components Associated With It...

Hello morphiusiam and welcome to the BC HijackThis forum. I do not see any signs of viruses or malware in the log. It is clean.

Having tmp files in the temp folder is normal. This is where programs put temporary files. If they are deleted, the program will create a new one when needed. As soon as the temp folder is cleaned out, temporary files will start showing up again as quickly as programs need. The folder will probably never be completely cleaned out. I clean my temp folders out once a week and as soon as they are clean tmp files start showing up again. This is simply what happens with Windows.

There are various programs like Unlocker (do a Google search) that can tell you what program is using a file and has it locked. This will tell you which program is creating the file and allow you to unlock it and delete it. If the file is deleted, however, the program using it may become unstable so I wouldn't recommend deleting it whilethe application using it is running.



Read other 1 answers

Hi. Didn't see a FAQ forum as I'm sure this is one every newcomer asks.

Now that I have found several instances of an obsolete program using RegSearch, what is the procedure for removing them from the registry. And would it be the same for each key.
I use a registry backup utility called ERUNT, so I wouldn't need to know how to backup each key individually. I just need to know the step by step process for deleting these little buggers.
I have tried to remove these items with AdAware,Spybot,BHO Demon and HiJack This. They keep reappearing on each reboot. I am using WinXP Home on an Dell 4300 if that matters.
Thank you for any help you can offer, I have learned a lot so far, just reading people's questions..........deango

A:Deleting Orphaned Files

What do you mean by "several instances of an obsolete program"?Are these Spyware/Malware programs?If so, you should post a HijackThis log to be examined.HJT is is a program that should only be used by someone who is trained to do so.Read the pinned post in the HijackThis forum, here Please read, and follow, all directions carefully.Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.A member, of the HJT Team, will help you out.It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.NOTE:Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.

Read other 11 answers

I need to move files from an old Windows 2000 PC to one running XP Pro.

Is it possible to simply plug the Win2K machine into the USB hub of the XP machine and they'll see each other? (I am well aware you can't just go from port-to-port without damaging the computers' ports, which is why my question is about HUBs specifically.)

I'm looking to do this on the cheap... using stuff I already have, rather than waste money buying another null modem cable, Cat-5 crossover cable, or expensive USB "Laplink" cable with built-in circuitry, for a file transfer I'll only do once. My Ethernet hub is DOA at the moment, so I can't do it that way.

I have an OLD null modem cable... so old it has DB25 connectors on each end, while the PC's have newer DB9 serial (COM) ports. So using my old null modem serial cable is out, and I have NO desire to purchase two 25-to-9 adapters just to use it. Plus, it would take AGES to xfer gigabytes worth of data at even maximum serial port speed

"Removing the drives" from the 2K machine, even temporarily, is not an option because it is still in use. And why even go through the bother if I can help it?

Anyone else ever try this?

A:Quick & Dirty 2K to XP file xfer via USB hub?

Okay, will go the Hub route.

Thanks for the reply.

I have a old cheap-o 4-port Ethernet hub that is out-of-commission because the power cord was chewed beyond repair by my cat, and I've never found a cheap replacement p/s for it.

Also, after posting my question, I realized I don't have a "male-to-male" USB-A gender changer that would even allow me to plug the Win2K machine into one of the USB ports on the hub (I have a M/F extension cable, and a USB-A to USB-B cable, but nothing that would give me a "USB-A male" connector on both ends.

I guess I need to break down and buy another cheap hub. Thanks.

Read other 5 answers

I have a folder with sequentially named images (a0001, a0002, a0003, etc.) and I was wondering if there was a way to delete every 3 files without touching the others.

So for example, I have: a0001, a0002, a0003, a0004, a0005 a0006, a0007, a0008, a0009

And after I would like to have: a0001, a0005, a0009

I've seen a couple batch files around that don't do exactly the same thing, but I'm not sure what I would need to modify.

A:Batch File/Command: Deleting every Xth file

Would like to see the examples you saw. But what I would do is setup a for loop to list all the files in the directory. setup a counter. When the counter does not equal one delete the file. after you have deleted the 3rd file (essentially the 4th file in the list) reset the counter back to zero.

Read other 1 answers

 Copyright (c) 1993-2009 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
#     rhino.acme.com          # source server
#     x.acme.com              # x client host
# localhost name resolution is handled within DNS itself.
#       localhost
#       ::1             localhost

Read other answers

When I started up my computer this morning it went immediately to Checking file system on C: The type of the file system is NTFS. The volume is dirty. CHKDSK is verifying.... This Check file runs over and over again. It reboots and goes through the same routine over and over. I recently added the new Firefox edition and Avast free antivirus to my system. It is a Windows XP system. Any ideas on how to fix this problem?

A:CHKDSK file system on C volume is dirty

Hi, boot from the Xp install Cd...when prompted press [R]
Choose Windows installation [typically by pressing [1]
When prompted for password.
Press Enter.
chkntfs /x c:

Note space before the /x and before c:
C: being the drive letter that Xp is installed on. This should clear the dirty bits on the drive and allow a normal boot.
It has to be the full Xp install Cd - a not an OEM Cd [original equipment manufacturer]

Read other 1 answers

I have a Dell dimension 8400 running XP. Error on startup reads:

checking file system on C:
The type of the file system is NTFS
The volume is dirty

CHKDSK goes through all 3 stages and completes them. The last thing it says is 'Usn Journal verification completed'. But nothing else will respond. I have pulled the plug and started in safe mode, same thing happens or it will run a bunch of dos commands and stop with no result.

I have read lots of other threads but I can't find the same exact problem. I can't get to a dos prompt (i think) to type in some of the commands I read about.

I would love to just get it so I can backup 1 more time so if I have to replace the hard drive I am current.

thank you

A:error:checking file system on c: the volume is dirty

Read other 16 answers

I've managed to get rid of most extra / orphaned music files from media player, thanks to this thread:


... but there are a couple of "artists," several "albums" and one "genre" still listed.

How do I make these go away?


A:Deleting orphaned albums / folders in Media Player 8

Read other 10 answers

Hi. I have noticed a few odd things going on with my computer over the last several days:

1. When I try to click on a link to view a website from Google or other search engine, I am redirected to an advertisement. My security software is catching it, but then I am brought to the error screen to try to load again.
2. The computer had turned off on its own. There were no power outages.
3. Comodo and Spysweeper shut down. When I reloaded, I had the weirdest errors with Comodo blocking it's own IP address and also blocking the operating system from doing normal processes. Spy sweeper was very slow in loading.
4. I noticed the following file system32\config\userdiff. I opened it and it says " +E)/DIRTYYYYYYYYYYYYYYYYY" with more "y" going onto other rows.
5. I also wanted to check on two other files "\is-DJ0CL.exe" in running processes and ""regsvr32"/s mqrt.dll" in start up. I know the last one shows up on some searches but the difference in mine is that the quotation marks around regsvr32 are included and this is newer to my start-up list.
6. My security log file in Microsoft is empty.

I ran Malwarebytes in safe mode and it can back clean. Thanks for any help you can provide.


A:system32\config\userdiff file say "dirty", Firefox redirect, Comodo & Spy Sweeper errors

We Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

Read other 1 answers

I am looking for a procedure to remove the content of the
index file which is a dat.file.same is in my tmporary internet,content ie5.I like to get a procedure that I could use at random.

A:index.dat file

easiest way is through dos....here is a link to a thread to another board covering the topic.


Read other 1 answers

How can I print out what the index.dat file viewer shows. I am desperate. thanks a bunch It says export to csv and then it comes up save as type csv for excel. I have excel but nothing happens....

A:index.dat file

You did not identify your OS or the application producing the index.dat (csv?? formatted) files.
If you are using WinXP or Win2K, have you accidentally latched onto one of the system index.dat files? If so, there is nothing of use to you in them and they ceratinly are not csv format.
If you have, in fact, a csv format you should be able to read it with any ascii viewer. Try notepad to test for this.

Read other 3 answers

hi, i was wondering if any one could help me. i have an index DAT file in my cookies file. i wont delete and says it is in use by another programme. is this normal. with my old computer i hada virus and it the same file butthere were other dat files that multiplies, i think there was a nt user file too. ive ran avg and it can not find any viruses. is there and anti virus proagrammes that any one can recommend

A:index DAt file

It's normal.

It's a file that is used to provide faster access to cookies within that folder. IE an index.

There is also one in \History and \Tempoary Internet Files

Read other 1 answers

i have just installed pinnacle studio 12 on my pc
and now in my video folder there are two INDEX files next too every video.
pinnacle must have done it but why ? ? ?
do i need them what are they for ?

Read other answers

I was reviewing my index.dat files on my computer and I came accross many urls that said this:
big.oscar.aol.com\[email protected], there was 6 all with different screen names. What does that mean when you see that?? What is big.oscar.aol.com? Does it mean someone was chatting on AIM to babygirl111286sg? Please help me solve my dilema

A:file name in index.dat

Do other people have access to your computer when you are not present ?

If so then perhaps see here :

http://www.softheap.com - To use password protection software.

Read other 2 answers

The file indexing service is not working. I need this service since my music collection consists of more than 145 thousands songs.
I've tried everything short of reinstalling the ops. Reinstalling the operating system would clean my entire HD.
I also have to external HD, one with 2 tera capacity and another with 1.5 tera capacity.
Is there a way to repair my file indexing service without loosing my progtams?
Attached is a file with system information,
Thank you very much,

Guillermo Toledo

A:File Index

You can try a repair install, http://www.vistax64.com/tutorials/88236-repair-install-vista.html .


Read other 4 answers

I have an index.dat file in my cookies folder that opens Quicken when I open it. It opens Quicken as if I have never been there before, I use Quicken all the time.

I tried to delete/remove the dat file with "Complete Internet Cleanup" and nothing happened. It still opens Quicken. Any ideas on why it is opening Quicken and how to stop it from opening Quicken?

A:Index.dat file

the file is a database which IE needs to keep track of your cookies (even if you don't have anyone at present)...

It most likely opens up in Quicken because you've at some point associated all .dat files with Quicken (or maybe the program did it by itself)...

How to stop it from opening Quicken depends on which OS you are using... (though it's quite similar in most of MS' os')

In win2k:
Open explorer, choose tools -> folder options. Click on the "File Types" tab, and let it load.
Press the "d" button, and you'll be taken down to the first file which starts with a "d"...
Browse until you find the one which says "dat".
Select it, and click on the delete button.

It should be somthing similar in W98 and XP...

The next time you open index.dat it shouldn't open Quicken anymore...

Hope this helps...

Oh, and
:wave: :wave: :wave: welcome to TechSpot :wave: :wave: :wave:
Hope you'll stick around!

Read other 2 answers

How do you delete the Index.dat file in cookies of user (name) folder in Windows XP?

A:Index.dat file

Read other 15 answers

I have just installed and updated W7.
I spent a day finding my way around.
Then I got to work updating my website.
And ran into a problem:

The css file is not being accessed.
I made and saved the file in the normal way, just as I did in XP.
But what works in XP does not work in W7.

How can I get round this?

Thank you for your kind attention :-)

A:index.css file not recognised

You can't open that .css file or?

Read other 2 answers

Hi Can someone Help my I have been searching everywhere and cannot come close to finding my problem.
I have Vista 64 bit and Microsoft Office 2007. My file indexes for my c drive, program I have when I view them show up like an iTunes index. What I mean is all I get is the file name and then stars on the right of the index.

The headings are the same as iTunes i.e., Artist, Name, Album, #, Genre, ratings. Right now I am looking the the Temp docks in Widows and it has those headings and an iTunes set up (my documents do the same but not all the time) I like to view everything in details but have to go to the profile because the index is in an iTunes set up and does not give me detailed information but with my Windows files it is consistent always in the iTunes index set up. Any help out there please!

A:File Index Problems

Hi gripweed,

Welcome to Vista Forums!

Folder type formats are typically determined by the first file entered into that folder. I suppose audio type files were the first entered into these other folders and so they are using that format.

Here's how to change the default template for a folder: http://www.vistax64.com/tutorials/70819-windows-explorer-folder-view-settings.html. Default behavior is to select the template based on the first type of file placed in the folder (it has to choose something). Vista sets the Explorer window view settings and folder type template according to what folder types are in the window. This will show you how to reset the Windows Explorer folder view settings, turn off Automatic Folder Type Discovery and increase the folder view cache to have Vista remember the view settings, folder type template, size, or position of a specific window for when it was last closed at the specific path location.

Here's another article on how to change the Windows Explorer columns and sort order in Vista: http://www.vistax64.com/tutorials/108665-column-customize.html. This will show you how to add, remove, move, change the width, and change the sort order of Windows Explorer columns to how you want them.
I hope this helps.

Good luck!

Read other 1 answers

Hi everyone

I was looking at some files when I checked the Index file there was more files listed then I can count would some one please tell me if its safe to delete them? I have been a guest here for awhile and learn a lot from reading the posts and tutorials so I know there are a lot of friendly and wise people here who are willing to help people like me who still has a lot to learn about how Vista works. Any advice about deleteing these files will be appreciated.

A:Index File Question

Hi clark1937,

You would have to list the specific files to know if they can be safely deleted or not. Usually don't won't to be deleting files unless they're temp files or things like music files and the likes.

Read other 1 answers

there any way to move index of file://C,D,E:/ ?? to flashdrive/ssd


A:Backup from Index of file?

Hi nisilhum.

I'm think you need to explain in more detail what you are wanting to do.
Almost 200 members have read you post and no replies.

Just explain exactly what you are trying to do and why.

From my reading of your post this tutorial just might be what you need.

By Brink:

Index Location - Change

Read other 2 answers


I just ran a virus scan, and a file was quarantined. I found the file in the quarantine area, and deleted it. It was something like Index[1]... I'm wondering if this was a necessary file? Or how to find out if it was?

When I restarted the OS, some of the deleted favourites had re-appeared in the favourites menu--if that has any relation.

If it was necessary, how can it be restored?


A:Deleted Index[1]. File

Hello boon82

The only sort of Index files that would be important would be indexsrv.dll hopefully it wasn't. It does however sound like it was a malware related file/folder.

I would advise at this stage that you Look over the First Steps at Removing Malware Just to be on the safe side and make sure your system is completely clean



Read other 6 answers

Does anyone know the conspiracy of index.dat file.These file are hidden in windows and database you internet longs you can't delete or open them they keep the long ..

A:conspiracy of index.dat file

Read other 7 answers

Hi there.
When you typing some word (i.e. dog) at the search line of windows explorer, the operation system approaching to to some index file.
I need to locate this file.
Someone can help me?

A:Where is the index file location?

For what purpose do you need to locate the file? What is your problem that you're trying to address?

Read other 3 answers

Hi all,
New here and not a techie by any stretch of the imagination, but would appreciate urgent help!
Started up my PC today ( Acer Travelmate 7520 Laptop running Vista) and it went straight into check disc. It gets 2 of the stages done, and then seems to loop endlessly at "recovering orphaned files"
I tried pressing F8 and going into safe mode, but it freezes after loading a number of driver files.
Now I am at a loss as to what to do, it sounds bad, and seems to be a hard drive issue but there my knowledge ends.
There's lots of confidential business info on there so I am very reluctant to go to my local store, although may well have to if I cant fix this myself.
Help appreciated!!


A:Check Dsc runs from boot up, but loops endlessly " recovering orphaned files"

Sorry, but your symptoms are the typical indication of a bad hard drive. If you computer has a self diagnostic, use it to determine the condition of the hard drive.
If you do not have a self diagnostic, go to the website of your hard drive manufactuer and test the drive.
If you cant get to the web site, run in safe mode. If it runs its only software and we can fix it. If it does not run, most likely hardware, and again the finger points to hard drive

Read other 4 answers

Hello all,

this is my first time posting here, but i have a huge problem regaurding a very important RTF file ive been authoring in wordpad for 5 years now. Ive been adding to this doc for a while, just text, its pretty long, but i realized today opon opening it that the bottom half of it is GONE. i dont understand how this happened, but i need to recover it. Is there a way to recover an old version of it? i basically resave and overwrite it everytime i add something. I have backups of this file but the last one is fairly old. help?


A:Recovering old RTF file

Try PC Inspectorhttp://www.snapfiles.com/get/pcinspector.htmlhttp://www.officearticles.com/word/recover...rd_document.htmStep 4

Read other 1 answers

i deleted my desktop icon in my personal file. now everytime when i open my download file, it will pop out a msg box stated that c.\User\User\Downloads\Desktop refers to a location that is unavailable. It could be on a hard drive on this computer, or on a network.Check to make sure that the disk is properly inserted, or that you are connected to the Internet or your network, and then try again.If it still cannot located, the information might have moved to a different location.
how can i solve this?

A:Help: recovering file

Hello Jess, and welcome to Seven Forums.

If you haven't already, double check your Recycle Bin to see if your Desktop folder may still be in it. If so, then you can just restore it from within the Recycle Bin.

If that is not an option, then open your C:\Users\(user-name) folder, and create a new folder named Desktop, then restart the computer to see if that may restore it.

If not, then you using OPTION TWO in the tutorial below to restore your Desktop folder should.

User Folders - Restore Default Location

Hope this helps,

Read other 3 answers