Over 1 million tech questions and answers.

win blue soft took over my pc..please help!

Q: win blue soft took over my pc..please help!

I have this terrible situation...Im in safe mode now and I can use my computer fine, but when I start it up regularly I can't use the internet. Win blue soft blocks everything. It's not in the control panel so I cant delete it and I went to start to search and I couldnt find it there either. I need to get this off of my computer...Can anyone help?

RELEVANCY SCORE 200
Preferred Solution: win blue soft took over my pc..please help!

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: win blue soft took over my pc..please help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:55 AM, on 8/23/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bet.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = actsvr.comcastonline.com:8100
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = cdn
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: &Helper - {2E59498D-7E44-4452-9044-0973B080B9E8} - C:\WINDOWS\system32\winexplorer.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Blubster] C:\Program Files\Blubster\Blubster.exe SILENT
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PAV] C:\Program Files\PAV\pav.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [setup2.exe] C:\WINDOWS\system32\setup2.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)" -"http://www.sonypictures.com/movies/triplex2/site/game/x2_level1.dcr"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo1.walgreens.com/WalgreensActivia.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1234383493812
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4E3A5C0F-D263-4D4F-AE8A-77FDA1C41C79}: NameServer = 85.255.112.136,85.255.112.145
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.136,85.255.112.145
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.112.136,85.255.112.145
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.112.136,85.255.112.145
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.136,85.255.112.145
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
--
End of file - 9720 bytes

Read other 1 answers
RELEVANCY SCORE 50.4

My Dell became infected with a pop-up that stated that I was infected. The request was for me to purchase a program to remove the infection. My computer supposedly had protective programs. I chose not to pay.
The pop-ups kept coming. I tried various cleanes and was able to remove the pop-ups from my computer. Now, though, I can't print anything from the internet. I can print from Micro Soft Word. I also can't access the Internet Explorer.
I've gone to various web sites trying removal programs. I rebooted my computer to a "Safe Mode" but still couldn't remove the infection.
Can someone help.
Thanks.
Rich R.

A:Win Blue Soft

If you have access to another computer, you can burn this to a CD or download to a flash driveThe process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box w... Read more

Read other 1 answers
RELEVANCY SCORE 50.4

I have this terrible situation...Im in safe mode now and I can use my computer fine, but when I start it up regularly I can't use the internet. Win blue soft blocks everything. It's not in the control panel so I cant delete it and I went to start to search and I couldnt find it there either. I need to get this off of my computer...Can anyone help?
 

A:Win Blue Soft

Read other 15 answers
RELEVANCY SCORE 49.6

Im running XP The only thing I can do on my PC is open up firefox. Ive downloaded Hijackthis Malware Bytes Combofix Iexplore and everything else Ive read on the different posts. Nothing runs or opens up. I download them and they just sit there.Tried to run in safe mode nothing happens. Ive read all the other post and it seems Im the only one that cant even get a Hijackthis scan !! I await Some ones instructions..

A:WIN BLUE SOFT DOES ME HARD [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

Read other 1 answers
RELEVANCY SCORE 49.6

desk top contracted antivirus soft tried using reimage to remove (mistake) and have been working at removal for several days. i was able to correct most problems but there is still part of this thing left. the pc is now glitchy and freezes up randomly and really enjoys the blue screen with IRQL_NOT+LESS_OR_EQUAL 0x000000a very frustrating.here are the initial logs.

A:antivirus soft and blue screen

Hi there If you already have a copy of ComboFix, please delete it.Please download ComboFix to your desktop from one of these locations. You must rename it before saving it. Save it to your desktop.Link 1 Link 2 Link 3 IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on Combo-Fix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it s... Read more

Read other 9 answers
RELEVANCY SCORE 46.8

Hello everyone.This is my first post,but I really do need help.I have this fake antivirus which is either call Av suite or av soft.They both where created by the same group of hackers.I read that I have to go to Safe mode with networking in order to fix it.But the problem is that I can only go to it awhile because then it will just shut off.I have also notice that I can't go to safe mode(without networking)because a blue screen appeares.The problem started with a redirect virus,which I try to removed it but failed.Please help me as I am worried for the files,passwords,and computer.

A:How to remove AV Suite or Av Soft fake antivirus,and safe mode blue screen.

Hello Johan?, welcome to TSF...

your best bet would be to read the instructions in the following thread:
http://www.techsupportforum.com/f50/...lp-305963.html

Read other 2 answers
RELEVANCY SCORE 46

I will start explaining my most urgent problem, then move on to the saga of my RAM. Before I begin though, some information about my PC. I am running MS Vista Basic edition, with service pack 1 & 2 installed. I have a ASUS Maximus Extreme motherboard, and I currently have 2 RAM types installed (more on the why of that later).

One set of memory: G.SKILL Trident 6GB (3 x 2GB) 240-Pin DDR3 SDRAM DDR3 2000 (PC3 16000) Triple Channel Kit Desktop Memory

The fourth stick of memory is: Crucial Ballistix 1GB (1 x 1GB) 240-Pin DDR3 SDRAM DDR3 1600 (PC3 12800) Dual Channel Kit Desktop Memory Model

I'll explain the why of 2 different memory types now. I have 2 sticks of the crucial memory. My system was constantly overheating for a while (I would get forced resets and a Over Temperature error on boot up). This most likely damaged the memory. So I bought some fans and new RAM, the G.SKILL Trident stuff. Only when I try to start my computer with that RAM, it seems to start but I won't get anything from the monitor. There are no beeps from the computer though, it seems to start normally. But when I have 1 stick of the Crucial memory and the 3 Trident sticks in, it starts just fine.

On to my most urgent problem. When I install the RAM, all of the memory detects. At some point (I don't know when) it will drop down to detecting 3 gigs instead of 7. If I move around the Crucial memory, it will all detect again for a while, then go back to 7 gigs. As I am an avid gamer, 3 ... Read more

A:Multiple RAM issues, detects then doesn't detect, Blue screen death errors, soft lock

Is there something I could improve in my post to increase the number of helpful responses?
 

Read other 1 answers
RELEVANCY SCORE 46

I freshly reinstalled my windows 7.
before and after the install,
when I watch videos on youtube.com (that's the only example atm),
the videos play great, flawless framerate, no matter the quality.
but they will randomly lockup. pause. only while in fullscreen.
high speed internet, videos have completed downloading, streaming speed isn't the issue.

if i press ESC to the video minimizes to a smaller display and works flawlessly,
if i press full screen again, the video continues flawlessly, untill 5 or 10 seconds later,
no specific time, they may more may not pause again.

no other system annoyances that i can recall.
i tried updating divx, although Ive never had to install those to watch youtube.

any ideas what could cause full screen video lockup?
ESC and a refullscreen instantly solves the issue, but i have to do it a few times throughout some videos.

reinstall java maybe? seems like I had to install java to watch youtube. i forget.

A:full screen youtube video lockup (soft soft)

I would make sure my Java script was OK. Do you run Trend A/V by any chance. This can block Java! What's you broadband speed? Does this happen at all times of the day or only at specific times?

Read other 5 answers
RELEVANCY SCORE 45.2

hi there ,

Inspite of being very careful , I'm having troubles with that stupid trojan and virus alerts for 2 days now.. I tried kaspersky6 and nod32 to detect and clean the reason but had no luck till then..

well, here are the details..

I cannot see temporary internet files folder which should be in :

C:\Documents and Settings\Administrator\Local Settings folder.


and those gifs are created periodically , after deleting , they appear again some time later in C:\Documents and Settings\Administrator\Local Settings\Temp folder.



nod32 is alerting like crazy about those gifs , you can see the quarantine screenshots below






finally, you can see the combofix and hijackthis logs below..


Quote:




Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 04:39:06, on 01.06.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Autodesk\Data Management Server 5\Server\Dispa... Read more

A:soft.update365.us - soft.update999.cn - alman.nad virus

Hello and welcome to TSF.

Sorry for the delay in response. The forum has been very busy.

Please note that Combofix is a very powerful tool and should never be used without supervision by a trained analyst. Under certain conditions, it may render the machine unbootable. If you haven't received help elsewhere and still need assistance, please proceed with the following instructions:

Now, run HijackThis. Close all windows and browsers except HijackThis.
Click on Open Misc Tools
Click on Delete a File On Reboot
Click once on the file below to select it, if listed:

C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll

do the same for this one, if listed:

C:\WINDOWS\AppPatch\Jview.dll

Click on the Back button to exit Process Manager

Now, back at the main screen of HijackThis, click on Scan and put a check in front of the following

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll
O21 - SSODL: JavaView - {DA191DE0-AA86-D04E-4B87-2A3D4928BE99} - C:\WINDOWS\AppPatch\Jview.dll
O21 - SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll

Close all browsers and windows other than HijackThis and click on "fix checked".

===============================

Restart your computer.

===============================

Download Deck... Read more

Read other 1 answers
RELEVANCY SCORE 44.4

Best soft to recover 3TB HDD of GPT on wondows 7 ? free soft most like


hii I am using my Seaget 3TB HDD over 9 months , I just conevert MBR to GPT from acronics Disk directory to fully utilize 3 TB 3 weeks ago ______it runs great over 2 weeks but

now when i turn on PC i see win 7 pop-up massage to format disk and select MBR-GPT WTHElll !!

win 7 com. manager detect it but as unformatted disk
(I also try to use this HDD on different machine and also on win 8 Pro and also via SATA--to--USB adaptor but i am having same issue ____win 7 and all softs says it is unformatted and need to be format )

please guys help me to recover this HDD

free soft will be most welcome___and priced soft also welcome

A:Best soft to recover 3TB HDD of GPT on wondows 7 ? free soft most like

I just recently had a problem similar to yours, just mine was a bit more complex and have put it on the 'backburner' untill I have more time. I havent found a reason why my disk did 'fail' but dont worry, it can be recovered. Greg recommended this program to solve my solutions, Partition Wizard. This comes in many 'formats' Home version is what you want, it is free and allows you to do the tasks you will need. There is also a more advanced 'bootable' cd which can aslo be foudn on their website. By following this link to a video guide, you have lots of chances of recovering most-all of your data, only downside is that you must have a seperate hdd to copy the recovered files onto, be it your internal HDD or an external one. DONT COPY YOUR RESTORED FILES STRAIGHT BACK ONTO THE DRIVE as this may lead to permenante data loss. It is upto you if you choose the cd/normal one. Could i recommend you ask gregrocker to have a say in this thread as he knows alot in this area,

Partition wizard - Best Free Partition Manager Freeware and free partition magic for Windows 7, Windows 8, Windows Vista and Windows XP 32 bit & 64 bit. MiniTool Free Partition Manager Software Home Edition.
-Bootable CD - Partition Wizard Bootable CD allows user to manage partition directly with partition manager bootable CD.
How To Guide - How to activate Partition Recovery Wizard of partition magic? Partition Wizard Partition Recovery Wizard Video Help.

Read other 7 answers
RELEVANCY SCORE 43.6

So I have a Blue Yeti, and I'm an online animator/voice actor. Whenever I record audio on my Blue Yeti (OR any other mic) I record about 4-6 inches from the mic, and turn the gain down enough that the audio doesn't peak as I yell or whatever. This is what you're supposed to do if you don't want your audio levels peaking and making your recording sound horrible and corrupted. However, afterwards, it means I have really quite recordings. Not a problem right? Now that it's recorded right, I can boost the volume of the entire clip afterwards right? WRONG. I'm not an audio expert so I must be missing something. But why in GODS NAME would the audio distort and peak AFTER it's recorded successfully? It's all there, it's all clean audio. If I turn the volume on my speakers all the way up it sounds CRYSTAL CLEAR! All I want to do is do that INSIDE the computer so that when I upload it to youtube people don't have to turn their speakers so far up. But if I increase the clips volume in the computer, it distorts! It sounds awful! Why?! I tried in Sony Acid and Audacity and they both do the same thing! Why?! I seriously don't understand what I'm missing here! I can take sound effects, and recordings made by other producers and crank them up nice and loud, but mine just fall apart! If anyone understands audio stuff, please tell me what I'm doing wrong.

A:Soft Recording volume with Blue Yeti, increasing volume distorts audio

I have a home recording studio using Sonar X1 software.

I don't know about Acid, but it should allow clean recordings. Audacity the same way.

I record, generally, in the -10 level with my recording program, at 24 bits/44.1 Khz. At -10, I have plenty of headroom and can then adjust the levels after the recordings and at mixdown. I export the mix as a standard 16 bit/44.1Khz wav file and then "finalize" whatever I want to do to the song, including levels, with "Goldwave" (an audio editior).

I assume you are converting the audio to MP3? If that is the case, that may be where the distortion is occuring? I find that 128Kb MP3's are very poor and at a minimum use 198 Kb MP3's.

Read other 2 answers
RELEVANCY SCORE 41.6

https://skydrive.live.com/redir?resi...4LBOC9*NPyA%24

https://skydrive.live.com/redir?resi...4LBOC9*NPyA%24


above is my Eyefinity setup 5760*1080 with HD 7950 OC 3GB( 4th monitor is shut down because AMD strictly need Active adaptors and its very very hard to find in India . I will buy active adaptor on amazon later just like last one )

I always face problem of software launching UI
e.g. when I click on my any desktop soft -it open on 3 monitors , sometimes on 1st monitor or middle , and they didnt remember my setting when I close them just like "My Computer"" etc

I want to put lock of those softs so that they will open only on particular display like 1st-2nd-3rd monitor with unque size lock

I tried AMD Hydra little bit
but no help , its not that easy and contains many Crazy-Buggs

so any recommended software or tricks for me ?

A:soft to manage launching of soft on 5760*1080 and manage, its so panic

displayfusion.com

I bought it 2 weeks back, home license of Pro, you can get free/trial to check it out.

I have 3 monitors going on a 7950, also.

Read other 3 answers
RELEVANCY SCORE 32

Hi,
I am little confused, is this the exact forum to submit this thread!
I need a good software to convert at least from .PDF to word with cheaper price for Win 7 Pro.
Is Adobe or Nitro is ok? I think price of adobe is high...
Please suggest...

Thanks.

A:Soft for win 7

Free convert PDF to Word Free PDF To Word Doc Converter - CNET Download.com

Read other 3 answers
RELEVANCY SCORE 32

I would really like some help with my problem with Anti-Virus Soft, I don't know what all I have done to it already (I disabled it from booting and other stuff) but everytime I turn my computer back on, the registry keys are back, and since I am not too smart with computers, I thought Googling around would help and so far I havn't got too much help doing things manually. Forgot to mention that I have Windows XP. If you need any more information just ask, cause I don't know what all I should say here.

Thanks, Brandon.

A:Help With AV Soft

Hello and welcome... You need to do all the steps as some pertain to your issue..Please follow our Removal Guide here Remove Antispyware Soft (Uninstall Guide) You will move to the Automated Removal InstructionsAfter you completed that, post your scan log here,let me know how things are.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Read other 3 answers
RELEVANCY SCORE 32

Has "Soft RAM" for Windows 95 got anywhere beyond after release?

A:Soft RAM app

There is no software replacement for RAM. Soft RAM never really worked anyways. The best option is to buy more RAM.
Run the Crucial System Scanner, this will tell you how much RAM and what type and it will tell you the maximum amount of RAM your motherboard will support. Then you can purchase it from anywhere not just Crucial.

Read other 6 answers
RELEVANCY SCORE 32

I'm at my wits' end trying to rid my computer of this software. Can anyone tell me how to delete it? Add/Remove programs does nothing when I select it for removal. Here is my latest HJT log. Thanks in advance for any suggestions you may have.Logfile of HijackThis v1.98.2Scan saved at 4:02:55 PM, on 11/20/04Platform: Windows 98 SE (Win9x 4.10.2222A)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\SYSTEM\MSTASK.EXEC:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXEC:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 2005\PCCTLCOM.EXEC:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 2005\PCCIOMON.EXEC:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 2005\TMPFW.EXEC:\WINDOWS\EXPLORER.EXEC:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 2005\TMPROXY.EXEC:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 2005\PCCGUIDE.EXEC:\WINDOWS\TASKMON.EXEC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\WINDOWS\SYSTEM\WMIEXE.EXEC:\LOGITECH\MOUSE\SYSTEM\EM_EXEC.EXEC:\WINDOWS\LOADQM.EXEC:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXEC:\PROGRAM FILES\COMMON FILES\AOL\AOL SPYWAR... Read more

A:Can't get rid of SB Soft.

HiYou are running HijackThis from your Desktop. You will need to move hijackthis.exe to a permanent folder, such as c:\hjt . This has to be done as HijackThis creates backups when you fix items. You do not want them accidentally deleted or spread all over your Desktop.First create a new folder:A. Click My Computer icon on your desktopB. Click C: driveC. Click the File menu --> New --> Folder, a folder "New folder" will be created.D. Rename it HJTMove\Unzip hijackthis.exe to the c:\HJT folder.Uninstall SB Soft from Add\Remove Programs if present.It is a good ideea to print or copy these instructions because you are not able to access the Internet in SafeMode.Download Ad-aware SE 1.05: hereInstall it. When you get the last screen, with the "Finish" button and 3 options, uncheck those three items.Open AdAware and click the "Check for updates now" link. Close AdAware. Don't use it yet.Download System Security Suite here:System Security Suite Download & Tutorial. Unzip it to your desktop.Install the program. Don't use it yet.Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in WindowsREBOOT into SafeMode by tapping F8 key repeatedly at bootup: Starting y... Read more

Read other 1 answers
RELEVANCY SCORE 32

I am currently running Windows XP - Home Premium. Yesterday I some how managed to get the AV Soft virus. The first thing I did was research it and download MBam, which I then ran 3 times in safe mode, along with Avira, and Super. No luck, Mbam found some stuff, and I thought it was gone, but the this morning when I logged on, I still got the messages. I re-did everything again, and changed the proxy settings, but they changed back and the virus is still there. What do I do?

A:AV Soft - Help Please

I have now read all of BleepingComputers AV Soft threads. I downloaded and followed the Rkill/Malware bytes instructions and it appeared to get rid of it temporarily..then I re-booted. I ran Rkill again and its gone again...but I dont think its really gone. I am afraid to reboot my computer. I dont know how to run combofix by myself without screwing up my computer, so if someone could help my that would be great

Read other 1 answers
RELEVANCY SCORE 32

Hi
On the net I have found a download which says it may be of assistance in overclocking.
The program is called H-Odas FSB and comes as a zip file.
I have unzipped the file and am now wondering what to do with it, there is no *.exe file and the readme.txt is unhelpful.
Does anyone out there know what this thing is and perhaps more important how do you use it?
regards
phil
 

Read other answers
RELEVANCY SCORE 32

My mother is in Romania, she is trying to set up skype so we can talk to each other...but when she tries to use the web cam too, it give her an error message, soft rap and says something like there is another instance of this type in use. My camera here works fine with no problems her camera on window live messenger work great there too, only on skype does it give us this problem.... Please HELP! If anyone has any idea of what is going on or what I should do please tell me. I thank you! BiancaEdit: Moved topic from XP to the more appropriate forum. ~ Animal

A:Soft Rap

Are you sure you don't mean Sofrtwrap?Softwrap is anti-pirating (software) related. Do you use P2P file sharing, "Free" music downloads etc?http://www.softwrap.com/Check in Add/Remove Programs

Read other 1 answers
RELEVANCY SCORE 31.6

Help ... This anti virus Program somehow got Into my TASKBAR it blocks everything ON My puter ...A yellow Balloon pops UP .... saying whatever I am trying to do is INFECTED ..... Add remove programs .... MSCONFIG ... My anrivirus programs ...My spyware programs and It won't let me continue with anything I tried downloading DDS from your websight and It won't let that run says thats INFECTED ... as near as I can figure it the only way OUT is to buy their stupid program ... ? All rights reserved, Antispyware Soft Inc, Antispyware Soft and Logos
are registered trademarks of Antispyware Soft Inc. They are Out of England .... any help would greatly be appreciated .... Thanks Phil

A:Antispyware Soft

Hello and welcome to TSF.


Quote:




as near as I can figure it the only way OUT is to buy their stupid program ..




No, please don't do that.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

===================

The following tool will help running our analysis tools.

If you have an active internet connection, copy/paste the links below into your browser, don't click them or the rogue might redirect. If you don't have an active internet connection, download the tools from another machine, and transfer them to the affected machine via USB flash drive.


Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)

There are 4 different versions. If one of them won't run then download and try to run the other one. You only need to get one of them to run, not all of them.

V... Read more

Read other 1 answers
RELEVANCY SCORE 31.6

I am trying to get rid of the Antivirus Soft virus and am having difficulties. I was able to run Hijack this and it gave me the below log. Any help interpreting what I need to remove/fix or any other general advice on addressing would be very much appreciated Thanks!Logfile of Trend Micro HijackThis v2.0.3 (BETA)Scan saved at 8:44:05 AM, on 6/6/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\NOTEPAD.EXEC:\Program Files\Lavasoft\Ad-Aware\AAWTray.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Spyware Doctor\pctsGui.exeC:\Program Files\Spyware Doctor\pctsTray.exeC:\Program Files\TrendMicro\HiJackThis\HiJackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software... Read more

A:ANTIVIRUS SOFT - HELP!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 6 answers
RELEVANCY SCORE 31.6

Not a big issue but....

HP Vectra VLi8 running Win2K Pro. After shut down sequence displays "it's not safe to shut down...."

How can I configure it to autoshut? Went into BIOS to look for APM options but none found.

In Power Management section of Control Panel no appropriate option in evidence.

What gives?
 

A:Soft Powerdown

I went to HP and did a dozen or more searches without getting a really good hit. However, one of the articles I saw reminded me that if your machine wants to play a sound when Windows shuts down, and the sound file itself is bad, you will get a failure like this. You can go into ControlPanel>Sounds and change the sound for Windows Exit to "none". See if that makes a difference.
 

Read other 2 answers
RELEVANCY SCORE 31.6

Hi all, thank you for your help in advance! I caught the Antispyware Soft bug yesterday, so I followed the tutorial at http://www.bleepingcomputer.com/virus-remo...ntispyware-soft. It seems to have worked, but I would like to be sure that it is gone, and possibly get the green light to use combofix to deal with the rootkit. Now, I have Windows 7 64-bit; am I protected against the rootkit? Additionally, GMER did not work due to the 64-bit. DDS (Ver_10-03-17.01) - NTFSX64 Run by Johnny at 23:26:18.84 on Mon 06/07/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_18Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3999.2392 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSc:\Program Files\Microsoft Security Essentials\MsMpEng.exeC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_10227f8c486f7892\STacSV64.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\Hpservice.exeC:&... Read more

A:Antispyware Soft

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 5 answers
RELEVANCY SCORE 31.6

Morning Guys and Gals of Bleeping computors.I was infected with "Antisptware soft" and found this link to your site http://www.bleepingcomputer.com/virus-remo...ntispyware-soft followed the instructions and all was good with the world. I beleived I had removed the problem, until I shut down and restarted my PC and guess what, the little bugger was back once more to make my PC life hell. I once again followed your instructions and all looked good, did a restart and all was fine. I turned on my PC this morning and yep my little nemisis was back with avengence.So I now seek the assistance of the good folks of Bleeping computors once again.I will now wait for some one to answer me with the next step of the operation.

A:antisptware soft

Hello,Please follow the instructions in ==>This Guide<==.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include the link to this topic in your new topic and a description of your computer issues.If you can produce at least some of the logs, then please create the new topic. If you cannot produce any of the logs, then post back here and we will provide you with further instructions.Orange Blossom

Read other 2 answers
RELEVANCY SCORE 31.6

My computer (Windows XP) was recently infected with antivirus soft. I used malwarebytes anti malware to remove the infection, and also did a full scan with Microsoft Security Essentials, which is what is running on this computer for an anti-virus program. It seemed to okay at first, but now there are popups about surveys and whatnot showing up. Also, Microsoft Security essentials wasn't able to update itself, saying that it couldn't connect to the internet, even though I was connected. Plus, not sure if it is related, but the internet will stop working about every thirty minutes, even though another computer on the same network was still connecting just fine. AND, Google Chrome has not worked since the infection, even after uninstalling and reinstalling it. So anyway, here's the hijackthis log, thank you:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:33:48 PM, on 6/12/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eH... Read more

A:antivirus soft, pop ups,etc

Read other 16 answers
RELEVANCY SCORE 31.6

Hi,Thank you in advance; any help is very much appreciated.I was asked by Orange Blossom to paste / attach the following logs as a new post to this forum. She also said that since I had already ran "ComboFix" to go ahead and post that too.Earlier today I posted a detailed description of symptoms and actions taken since symptoms occurred. For your reference, here is my original post link: [topic="http://www.bleepingcomputer.com/forums/t/317830/browser-redirect-problem/"]http://www.bleepingcomputer.com/forums/t/317830/browser-redirect-problem/[/topic]If you need the description repasted here I can do that, just let me know. I am just trying to avoid clutter on the post. I can also post logs from malwarebyte and ESET too, just let me know.As per her instructions, I did the following:- Ran defogger to disable cd emulation- Ran DDS- Ran GMERThe logs are pasted in order they were executed as follows:1st - ComboFix2nd - DDS.TXT is pasted (Please note that I preceded the the paste with 10 asterisks **********3rd - ATTACH.TXT is attached4th - ARK.TXT is attachedComboFix 10-05-16.02 - stephen 05/18/2010 17:54:56.3.2 - x86Microsoft? Windows Vista™ Home Premium6.0.6002.2.1252.1.1033.18.3327.2111 [GMT -7:00]Running from: c:\users\stephen\Desktop\ComboFix.exeSP: Windows Defender *enabled* (Updated){D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} * Resident AV is active.((((((((((((((((((((((((((((((((((((((( Other Deletions))))))))))))))))))))))))))))))))))))))))))))))))).c:\programdata\pswi... Read more

A:"antispyware soft"

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 17 answers
RELEVANCY SCORE 31.6

I'm posting here after being directed from http://www.bleepingcomputer.com/forums/t/324177/antispyware-soft-residual-problems-after-removal/I mostly run linux but my children run Windows. My son picked up an infection with the Antispyware soft rogue spyware/scareware virus. I was able to remove most of it with MalwareBytes and removing the startup programs and bad registry entries. I also removed the bad proxy entry. So now I can mostly use the internet, but there are still problems. When I try to run Windows Update, Internet Explorer says the page is cannot be displayed. When I go to windowsupdate.microsoft.com with the Firefox browser, it says that the connection was reset. When I go there from an uninfected machine I get a message from Microsoft to use Internet Explorer with ActiveX turned on, so I know the virus is blocking things at a low level. I can get to other microsoft.com sites, just not ones that seem related to updates. Other weird network things also occur. When I am doing a google search for virus information I will get hits from many sites, such as bleepingcomputer.com. If I hover over the link, it shows the correct URL. If I right-click on the link to open it in a new tab, it sends me to some other unrelated garbage site. If I right-click and copy the link location and paste it into the URL bar in a new tab, I get to the correct spot. It is very weird that I'm having problems with both IE and Firefox.I have reset all the settings in IE without any resolution.... Read more

A:antispyware soft

Hi egstern1,Welcome to Malware Removal (VTSMR) forum. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. In case of making changes I shall assume my assistance is not needed any more.If the issue is not resolved please update me on the current condition of your computer.

Read other 10 answers
RELEVANCY SCORE 31.6

HiContracted the Antispyware Soft bug/virus last Friday, May 28th. Got hit with it all at once, with repeated warning boxes about all sorts of random programs, frozen browsers, and then the "program scan box" showing up and "running". I rebooted after about 15 minutes, and got MalwareBytes to update and run. It seemed to do the trick. I rebooted, then ran AntiVir virus scan, which caught a few other things. I rebooted, and then downloaded and ran SuperAntiSpyware, which caught a few MORE things. Everything seemed fine, but then the next day (Saturday 29th) things started acting funny again, though there weren't any more warning boxes or the AntispywareSoft program box. I then followed these instructions http://www.bleepingcomputer.com/virus-remo...ntispyware-soft I ran them twice for good measure, once in safe mode, once out. MalwareBytes didn't catch anything else, but I think something is still kicking. I cannot update Avira AntiVir at all (last update was Friday 28th). When I try to update SuperAntiSpyware I get error messages that it is being blocked (I did add it to the firewall exception list, and it did nothing). MalwareBytes does seem to be updating, but it's not catching anything. Browser still continues to run painfully slow, somethings seem to just not work, even though they should (e.g., Flash). Hopefully you can help me root this out for good. I know it's still in there - either AntispywareSoft, or something else now. Thank ... Read more

A:Antispyware Soft

Hello and welcome to Bleeping Computer. *Please Subscribe to this Thread to get immediate notification of replies. See HERE*It is important not to make any further changes or run any other tools/updates unless instructed to. This may hinder the cleaning process of your machine.*Please be patient, all Bleeping Computer helpers are volunteers and have lives outside this forum.*You must reply within 5 days otherwise this topic will be closed.=======================================================One or more of the identified infections is a Rootkit/backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identif... Read more

Read other 28 answers
RELEVANCY SCORE 31.6

Last week sometime I got hit with the AntiSpyware Soft virius trojan or whatever. I ran malware and got rid of what I thought I needed to get rid of. Since then my XP theme doesn't exist the computer is really slow and I am getting link redirects on google searches that don't take me to the right websites.I tried running the GMER program but it would crash and when it did get through I couldn't save the file because it would crash. DDS (Ver_10-03-17.01) - NTFSx86 Run by Owner at 10:41:22.45 on Fri 06/04/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2551.1886 [GMT -5:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\WINDOWS\system32\svchost.exe -k netsvcsC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exeC:\WINDOWS\System32\... Read more

A:AntiSpyware Soft

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 2 answers
RELEVANCY SCORE 31.6

Hello all! i am typing this topic on my wifes laptop because my desktop has a issue. I keep gettin errors that files are infected and my computer wont play them. Like my internet wont work because it says the site has viruses and what not on it which is false because its google or yahoo etc. It blocks everything i try to turn on...it blocked my AVG threat protector when i tried to run a scan and then i just keep gettin pop ups saying im infected and i need to unlock my subscription to antisoft protection program which i have no idea where that came from either cuz i use AVG. I tried that rkill program and it came up in a little black box and said it worked...The little green shield that is the icon for the antisoft protection program went away but if i restart my comp it comes back and i run rkill again and it takes the shield icon away once again but i cant use my web still but only this time i can actually open like aion online or wow or CS. (should have mentioned that b4 i couldnt even open my online games) However this problem still is a issue. Should i just wipe and go back to factory settings? And if i do wipe will i still have a workable windows vista?
Thanks for ur help in advance
-misplaced-

A:how do i get rid of Antispyware soft

ok...yes i know this is the SAME topic as another probably right below this one but i was told to make a new thread...even though he was fixed his own problem so i thought id use the same thread to save space (lol). OK either way not important but what is important is that i have this program blocking everything even my internet and my online games. This program says its called antispyware soft and has a little green shield icon. Please i need help...im not very good with computers lol i mean i know the basics but nothing in depth. Thank you for ur time and help.

Read other 11 answers
RELEVANCY SCORE 31.6

Hi I have been infected with a few things, I believe. First off, Every once in a while, a program called Antispyware Soft appears. It tells me i'm infected and need to download software to remove certain threats. I thought i was able to remove it, but it once again reappeared after a few days. I also have a google redirect virus. Any search result i click on from google will take me to a results5.google site. I don't know if these two are related or not. I think one, or both, have something to do with the Mirar program which i cannot remove from my computer. I have AVG Free and Malwarebytes. Malwarebytes did remove some threats on the last scan, but i am still encountering the redirect virus and mirar is still there. While the antispyware soft isnt currently running, i'm sure its still on my computer.

A:Antispyware Soft

Hello and welcome... You need to do all the steps.Please follow our Removal Guide here Remove Antispyware Soft (Uninstall Guide) You will move to the Automated Removal InstructionsAfter you completed that, post your scan log here,let me know how things are.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Read other 17 answers
RELEVANCY SCORE 31.6

I'm having trouble removing antispyware soft and who knows what else is infecting my computer. I tried following the guide but rkill.com is just not working out for me. I've ran and reran it around 30 times and each time, it gets killed.Here's my dds log:

A:antispyware soft

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 31.6

Hello,

Last week, Wednesday night I believe, my husband clicked on a pdf file on the internet and a window popped up trying to get us to purchase something called Antivirus Soft. Right after the window showed up we weren't able to get internet access or open anything on the computer, files, virus software, task manager, etc. Anything we tried to open would say that it was infected. We finally restarted the computer in Safe Mode with Networking and was able to get internet access and downloaded MalwareBytes and it said that it removed several things. We ran it several times since and it still has things showing up. The Antivirus Soft window isn't showing up anymore but if we are on the internet it seems to redirect us to random websites no matter what site we are on and some kind of internet script error box pops up asking if we want to continue running scripts.

I am attaching the logs that I read about when I registered, I hope I ran these correctly. I don't have access to a Windows Install disc or Boot CD. Any help would be greatly appreciated!

Thanks so much!




DDS (Ver_10-03-17.01) - NTFSx86
Run by HP_Administrator at 10:04:51.96 on Mon 06/07/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.490 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k... Read more

A:Antivirus Soft

Hi,

Please do the following;


Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When finished, it ... Read more

Read other 12 answers
RELEVANCY SCORE 31.6

Hi,My computer hasbeen infected by the Antivirus Soft - I attempted to reboot it so I could bring up task manager and hopefully shut the "virus" off, so I could run Malwarebites, but the computer will now not reboot. I have tried booting to Safemode, Safe Mode with networking, normal mode and even with a boot cd...none of them work. With safe mode it generally just ends up rebooting itself, with normal and the boot disk it usually gives the "blue screen", sometimes with an UNMOUNTABLE_BOOT_VOLUME error, or sometimes just reboots again. Any ideas on what I could do? Might this thing have messed up my HD - is there a way to tell? THe computer was running Windows XP.

A:Antivirus Soft

Hi, MGBCIL Lets give this a try. You will need a flash drive to move information from the sick computer to a working computer. It is the only way we can see the progress of our actions. Save these instructions in your flash drive as a text file (use notepad) so you can have access to these while in an external environment (PE).Here is what you need to do.Two programs to downloadFirst Download ISOBurner. Click Here for ISOBurner Instructions. Install the program, and follow the next set of steps. SecondDownload OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 276.7MB in size so it may take some time to download.When downloaded double click and this will then open ISOBurner to burn the file to CDBoot the Non working computer using the boot CD you just created.In order to do so, the computer must be set to boot from the CD firstNote : For information click hereYour system should now display a REATOGO-X-PE desktop.Double-click on the OTLPE icon.When asked "Do you wish to load the remote registry", select YesWhen asked "Do you wish to load remote user profile(s) for scanning", select YesEnsure the box "Automatically Load All Remaining Users" is checked and press OKOTL should now start. Change the following settingsChange Drivers to AllChange Standart Registry to AllUnder the Custom Scan box paste this in/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dlliaStor.sysnvstor.sysatapi.sysIdeChnDr.sysv... Read more

Read other 2 answers
RELEVANCY SCORE 31.6

I have a desktop that is infected with Antivirus soft and is wanting me to purchase it...I can not do anything on this computer, not even take it to safe mode. I have a blank flash drive and blank cd...Please advise.

A:Antivirus Soft

Please download OTLPE (filesize 120,9 MB)When downloaded double click on OTLPENet.exe and make sure there is a blank CD in your CD drive. This will automatically create a bootable CD.Reboot your system using the boot CD you just created.Note : If you do not know how to set your computer to boot from CD follow the steps hereYour system should now display a REATOGO-X-PE desktop.Depending on your type of internet connection, you should be able to get online as well so you can access this topic more easily.Double-click on the OTLPE icon.Ensure the box "Automatically Load All Remaining Users" is checked and press OKOTL should now start.Press Run Scan to start the scan.When finished, the file will be saved in drive C:\OTL.txtCopy this file to your USB drive if you do not have internet connection on this systemPlease post the contents of the OTL.txt file in your reply.

Read other 3 answers
RELEVANCY SCORE 31.6

Hi. I seem to have bad luck with viruses.I got home today from work and did the usual check email, check scores, etc, etc, but then my computer starting showing obviously fake messages and I knew right then I was infected. Similar to Desktop defender 2010 or whatever its calls.Anyway this one is antispyware soft, im sure you heard of it. I tried running malware bytes in safe mode, and it said it deleted it, but when I restarted I had the same problem. Anyway I tried to run a DDS log and gmer log, but since this virus shuts down basically anything that you open (including task manager) I cant do it.... any thoughts?I did some searching on the forum for other people with this problem and found that you are having them run OTL and posting the logs. I ran this in safe mode and got the logs, here they are:By the way it is really hard to copy and paste this text because this damned virus closes all of my programs so fast! anyway after prepping my fingers to move like they used to on nintendo track and field, i finally got both of them OTL logfile created on: 4/29/2010 5:09:32 PM - Run 1OTL by OldTimer - Version 3.2.3.0 Folder = C:UsersBoDownloadsWindows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstationInternet Explorer (Version = 7.0.6001.18000)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 86.00% Memory free6.00 Gb Paging File | 6.00 Gb... Read more

A:Antisypware soft

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 9 answers
RELEVANCY SCORE 31.6

Hey everybody,This is my first post here (too bad it isn't for a good reason) and I am stuck with dealing with this program. I came home last night to find my computer infected with Antivirus Soft... as it turns out my lovely wife decided to use my laptop to play around on facebook and yippie, here I am.I have read up on some forums on how to remove this but I am having a little bit of trouble. I have downloaded HJT and mbam and I have ran a scan with HJT. The information that I have says that the lines in HJT should always start with 04 and have sysguard.exe at the end of the line. The problem is that I have NO sysguard.exe on any of my lines so I am now at a loss as to where I should go from here.Here is a copy of the log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:59:23 PM, on 5/31/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Documents and Settings\Tony\Desktop\iexplore.exe.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Internet Explor... Read more

A:Need Help W/Antivirus Soft

Nevermind... found the removal steps in another form.

Read other 2 answers
RELEVANCY SCORE 31.6

Hey, posting for a friend here

he has antivirus soft, and i pointed him towards the removal guide. He installed rootkill, but gets this error when tryint to start it

"windows can not open this file: file: pev.rkexe to open this file, Windows needs to know what program you want to use to open it. windows can go online to look it up automatically, or you can manually select form a list of programs that are intalled on your computer"

he has tried the mirrors and all gave him this error. Any help?

A:Antivirus soft

Hello if this is XP....Go here to Doug KNox's Windows? XP File Association FixesRun 9th down on left... EXE File Association Fix ... the EXE not EML one.Post back the RKill and Malwarebytes logs after then scan and an update on how it's running.

Read other 1 answers
RELEVANCY SCORE 31.6

My grand daughter has the Antispyware Soft/Security warnings on her Windows Vista system. Pop-ups declare various files are infected. IE loads with various porn sites or Viagra sites. Windows Security Center screen pops up.On another computer, I downloaded defogger.exe, dds.scr, rkill.com and gmer.zip to a flash drive. Then I copied these files to the desktop of the infected vista computer. When I try running I obtain pop-ups saying ?defogger.exe is infected? and ?dds.scr is infected? and the programs do not run.

A:Antispyware Soft

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 31.6

I used MBAM to remove Antispyware Soft in Safe Mode with Networking. It appears to be removed, but I still can't get internet access through IE. It appears that proxy is not set (tick box is cleared).Suggestions anyone?DDS log:DDS (Ver_10-03-17.01) - NTFSx86 NETWORK Run by Toshiba User at 22:11:34.93 on Fri 28/05/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.788 [GMT 10:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k netsvcsC:\Program Files\AVG\AVG9\avgchsvx.exesvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\ctfmon.exeC:\Documents and Settings\All Users\Documents\dds.scrC:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe============== Pseudo HJT Report ===============uStart Page = hxxp://www.google.com.au/uSearch Page = hxxp://www.google.comuSearch Bar = hxxp://www.google.com/ieuDefault_Search_URL = hxxp://www.google.com/ieuSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8mStart Page = hxxp://www.muuler.com/uInternet Settings,ProxyServer = http=127.0.0.1:5555uInternet Settings,ProxyOverride = <local&g... Read more

A:Antispyware Soft

Hello and Welcome to BleepingcomputerPlease note we are very busy, so if I don't hear from you within 5 days the topic will be closed, If you have since resolved your issues I would appreciate if you would let me no so I can close this topic.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scans/Fixes box at the bottom, paste in the following bold text.%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\System32\config\*.sav%systemroot%\*. /mp /s%SYSTEMDRIVE%\*.exenetsvcsmsconfigdrivers32CREATERESTOREPOINTPush the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedThanks

Read other 5 answers
RELEVANCY SCORE 31.6

Hi All,

I have downloaded Rkil and Malwarebytes, both seemed to run OK. Malwarebytes reported 7 infections and I removed them. I then checked the Registry and deleted files that Bleepingcomputer recommended.
However, I still get infected! I have to run Rkill and Malwarebytes every morning.
I am using XP pro (SP3) and only visit AOL and my online banking sites.
Thanks for any help...

A:Antivirus Soft

Can anyone help? I've run Rkill; MalwareBytes; ATF-Cleaner and Superantispyware. All programs report trojans, infected KEY entries and infected files. I can remove them succesfully. However, after a few logins to my AOL account using IE I get the antivirus Soft malware back. Is there a problem with my IE browser?

Read other 2 answers
RELEVANCY SCORE 31.6

Have Antispyware Soft. SuperAntiSpyware doesn't detect/remove. Used rkill to disable and ran Malwarebytes - it ran, rebooted - still have it. Won't let me run rkill again. I'm able to access internet thru Mozilla. Wouldn't let me run DDS and GMER logs. Thanks for your help.

A:Antispyware Soft

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

Read other 13 answers
RELEVANCY SCORE 31.6

I got myself infected with Antispyware Soft. I got rid of it with Malware Bytes but I think there might be damage or a residual infection. Computer is slow as molasses, my default settings are screwed up, internet is slow and I cannot seem to manually use Windows Update. I tried to follow your instructions but whenever GMER is done scanning and I try to save the results, it freezes so I cannot get that log for you.DDS (Ver_10-03-17.01) - NTFSx86 Run by Bonnie Peterson at 17:45:15.28 on Fri 05/28/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1239 [GMT -6:00]AV: avast! antivirus 4.8.1368 [VPS 100528-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exesvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Google\Update\GoogleUpdate.exeC:\Program Files\Intel\Intel Matrix Storage Manager... Read more

A:Antispyware Soft

Hello and Welcome to BleepingcomputerPlease note we are very busy, so if I don't hear from you within 5 days the topic will be closed, If you have since resolved your issues I would appreciate if you would let me no so I can close this topic.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scans/Fixes box at the bottom, paste in the following bold text.%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\System32\config\*.sav%systemroot%\*. /mp /s%SYSTEMDRIVE%\*.exenetsvcsmsconfigdrivers32CREATERESTOREPOINTPush the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedThanks

Read other 17 answers
RELEVANCY SCORE 31.6

So a few days ago, I discovered AntiSpyware Soft had embedded itself in my computer, resulting in warnings by a fake anti-virus program and my computer running very very slowly. After using StopZilla, as recommended by several sources online, the trojan seemed to be removed and was not detected by StopZilla or SpyWare Doctor, a scanner that was also recommended. Alas, tonight the fake anti-virus popped up again and my computer is back to running at a snail's pace.

Any help would be truly appreciated. Thank you so much.

HijackThis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:30:24 AM, on 11/20/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18319)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-S... Read more

A:AntiSpyware Soft

Read other 16 answers
RELEVANCY SCORE 31.6

I need help with my mom's PC. She has been infected with antispyware soft. It is a virus that blocks everything you do and has popups that say that your system has been infected.Heres what I have done:Ran AVG- only cookies detected- deleted.Ran Malwarebytes- found virus..local file and 4 registry key which I quarantined & deleted.I found the virus file name "chfgpeftssd.exe" in the start up tab when I ran "msconfig" I unchecked it but noticed when I would come back to the tab it would be rechecked again. I am not sure how to remove it and figured I missed something.I need help seeing if I removed the virus all the way and if anything else is bogging the computer down.I appreciate your help! Thanks!Here is the hijack this log...Logfile of Trend Micro HijackThis v2.0.4Scan saved at 6:14:29 PM, on 5/25/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\dl... Read more

A:antispyware soft HELP PLEASE!

Hello gmsr4grls,Welcome to Bleeping Computer.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE... Read more

Read other 22 answers
RELEVANCY SCORE 31.6

I need some help with virus removal. Since it is infected I cant run any program without it being stopped and a pop up saying the file is infected.

A:Antispyware Soft

In one forum addressing this topic, the computer should be put in safe mode. then run rkill and malawarebytes. I am currently waiting on what malawarebytes scan to finish.

Malawarebytes found 7 viruses and removed them. Upon restart no popups appeared. So far so good. Anything else I should check or do?

Read other 1 answers