Over 1 million tech questions and answers.

DECRYPT_INSTRUCTION files have been automatically created & my files are damaged

Q: DECRYPT_INSTRUCTION files have been automatically created & my files are damaged

Symptoms
 
Last Saturday, I was surfing the net as usual. But then suddenly, my browser (IE 8) shutted itself down, twice.
 
After rebooting my machine, I realized my notepad files that I saved as UTF-8 encoding have become unreadable text or alien language text.
 
Later, I noticed the set of these 3 files on each of many of my folders :
1. DECRYPT_INSTRUCTION.html    
DECRYPT_INSTRUCTION.HTML 8KB
5 downloads
2. DECRYPT_INSTRUCTION.txt    
DECRYPT_INSTRUCTION.TXT 4.04KB
4 downloads
3. an internet shortcut named DECRYPT_INSTRUCTION (I right clicked to see its properties. Its URL is http://kpai7ycr7jxqkilp.totortoweb.com/d07a )
 
Many of my files that have the following extensions are broken :
1. txt
2. pdf
3. MP3
4. flv
5. JPEG
 
A few days ago, before I came to post here, I downloaded Kaspersky Virus Removal Tool and scanned my laptop. The result said something like, there are some files that have password protection. I myself don't know how to create a password to protect my file. So, who did that?
 
Another symptom is, sometimes my laptop freezes and when I reboot it, I got the blue screen.
 
 
 
 
 
My laptop
 
Dell Inspiron 1525
Windows Vista Home Premium
2007 Microsoft Coporation
Service Pack 2
Intel Pentium Dual CPU T2390 @ 1.86GHz 1.87 GHz
2.0 GB RAM
32 bit
Internet Explorer 8
 
My laptop got infected before with Smart Guard Fake Anti-virus (and could be some other virus/malware/trojan/something, I couldn't remember. This laptop is kinda old though). At that time my laptop was very damaged. My USB drive(s) got infected too.
 
I'm not sure if my machine has a real-time protection software, seems like no. I searched on Google but I don't know which one to choose from 
 
Please help me clean my laptop and my USB drives.
And please also help recover my damaged files as many of them are important for me.
 
Thank you.
 
 
 
 
 
DDS
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16476  BrowserJavaVersion: 10.67.2
Run by me at 23:57:49 on 2014-08-21
AV: AVG Anti-Virus Free *Disabled/Outdated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Disabled/Outdated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\aestsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\xampp\mysql\bin\mysqld.exe
C:\Program Files\Ralink\Common\RaRegistry.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Windows\system32\STacSV.exe
C:\Windows\System32\StkASv2K.exe
C:\Windows\system32\vmnat.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\VMware\VMware Player\vmware-authd.exe
C:\Windows\system32\vmnetdhcp.exe
C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Ralink\Common\RaUI.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\WLANExt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uProxyOverride = <local>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - c:\program files\avg\avg9\avgssie.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [vufuencs] "c:\users\me\appdata\local\temp\35twapr42npvfdhku9p\appdata\local\dhdgjpwb.exe"
uRun: [hqkcomka] c:\users\me\appdata\local\temp\kqnbmidwv7fisalnryw\hqkcomka.exe
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [PCMService] "c:\program files\dell\mediadirect\PCMService.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [SigmatelSysTrayApp] c:\program files\sigmatel\c-major audio\wdm\sttray.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\users\me\appdata\roaming\micros~1\windows\startm~1\programs\startup\rasautou.lnk - c:\users\me\appdata\roaming\microsoft\windows\ieupdate\rasautou.exe
StartupFolder: c:\users\me\appdata\roaming\micros~1\windows\startm~1\programs\startup\_unins~1.lnk - c:\users\me\appdata\local\temp\_uninst_46898393.bat
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\ralink~1.lnk - c:\program files\ralink\common\RaUI.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: NoDrives = dword:0
uPolicies-Explorer: Run = "c:\users\me\appdata\roaming\microsoft\windows\ieupdate\rasautou.exe"
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableVirtualization = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001051-0002-0051-ABCDEFFEDCBC} - <orphaned>
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
LSP: c:\windows\system32\wpclsp.dll
LSP: %windir%\system32\vsocklib.dll
Trusted Zone: dell.com
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
TCP: NameServer = 10.42.254.6 10.42.254.34
TCP: Interfaces\{4877D030-7E39-41D8-A09F-2DD50936215F} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{9493EA51-2071-4777-9E34-684956FB03AB} : DHCPNameServer = 10.42.254.6 10.42.254.34
TCP: Interfaces\{AB4AC2B4-9220-4BA1-9493-F598C36B6F39} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{F7AAB0F8-356C-4463-953C-7CB524915CED} : DHCPNameServer = 8.8.8.8 8.8.4.4
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs= c:\windows\system32\avgrsstx.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
.
============= SERVICES / DRIVERS ===============
.
R0 vmci;VMware VMCI Bus Driver;c:\windows\system32\drivers\vmci.sys [2012-10-24 71152]
R0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys [2013-8-10 61464]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-3-17 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-3-17 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-3-17 243024]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\AEstSrv.exe [2008-12-10 73728]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-7-17 308136]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
R2 RalinkRegistryWriter;RalinkRegistryWriter;c:\program files\ralink\common\RaRegistry.exe [2014-7-29 372736]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe [2013-10-9 3275136]
R2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\common files\vmware\usb\vmware-usbarbitrator.exe [2012-10-11 721048]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [2008-12-10 111616]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\drivers\netr28u.sys [2014-7-29 1202752]
RUnknown 1489405drv;1489405drv; [x]
RUnknown 69660479;69660479; [x]
S2 Apache2.2;Apache2.2;c:\xampp\apache\bin\httpd.exe [2010-7-17 29416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-19 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-9-5 171680]
S3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [2013-8-8 15576]
S3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [2013-8-8 10200]
S3 RaMediaServer;Ralink UPnP Media Server;c:\program files\ralink\common\RaMediaServer.exe [2014-7-29 625728]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-19 753504]
.
=============== File Associations ===============
.
FileExt: .txt: txtfile=c:\windows\system32\NOTEPAD.EXE %1 [UserChoice]
.js: <filetype is not registered>
ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2014-08-21 16:53:28 -------- d--h--w- c:\windows\PIF
2014-08-20 09:19:52 -------- d-----w- c:\programdata\Kaspersky Lab
2014-08-18 11:46:06 -------- d-----w- c:\program files\ESET
2014-08-18 11:25:18 -------- d-----w- c:\users\me\appdata\roaming\R-TT
2014-08-18 11:22:31 -------- d-----w- c:\program files\R-Studio
2014-08-17 13:48:59 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-08-16 10:34:14 263072 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2014-08-16 06:32:36 -------- d-----w- c:\users\me\appdata\local\Temp
2014-08-16 05:31:10 -------- d--h--w- C:\610757c
2014-07-31 18:58:35 -------- d-----w- c:\users\me\appdata\roaming\Apuqozq
2014-07-31 18:56:53 -------- d-----w- c:\users\me\appdata\roaming\Wuhiorn
2014-07-29 08:11:15 -------- d-----w- c:\programdata\Ralink
2014-07-29 08:09:45 238944 ----a-w- c:\windows\system32\RaCoInst.dll
2014-07-29 08:09:45 1202752 ----a-w- c:\windows\system32\drivers\netr28u.sys
2014-07-29 08:09:44 -------- d-----w- c:\programdata\Ralink Driver
2014-07-29 08:09:37 795648 ----a-w- c:\windows\system32\RAIHV.dll
2014-07-29 08:09:37 117760 ----a-w- c:\windows\system32\RAEXTUI.dll
2014-07-29 08:09:36 480608 ----a-w- c:\windows\system32\DiagFunc.dll
2014-07-29 08:09:36 1608768 ----a-w- c:\windows\system32\RaCertMgr.dll
2014-07-24 15:34:08 -------- d-----w- c:\users\me\appdata\roaming\Esynlu
2014-07-24 15:33:48 -------- d-----w- c:\users\me\appdata\roaming\Ukusarik
2014-07-23 20:26:29 -------- d-----w- c:\users\me\appdata\roaming\Sevywyo
2014-07-23 20:25:02 -------- d-----w- c:\users\me\appdata\roaming\Cofatit
.
==================== Find3M  ====================
.
2014-08-19 09:00:08 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2013-03-21 02:58:11 18005296 ----a-w- c:\program files\IE9-WindowsVista-x86-enu.exe
2010-06-16 06:37:10 1714294 ----a-w- c:\program files\tvplayer.exe
2004-03-17 21:13:46 1028368 ----a-w- c:\program files\vbrun60sp6.exe
.
============= FINISH: 23:58:47.24 ===============
 
 

attach.txt 12.7KB
2 downloads

RELEVANCY SCORE 200
Preferred Solution: DECRYPT_INSTRUCTION files have been automatically created & my files are damaged

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: DECRYPT_INSTRUCTION files have been automatically created & my files are damaged

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/545279 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.
Thank you for your patience, and again sorry for the delay.
***************************************************
We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.DDS.com Download LinkDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control can be found HERE.As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Read other 16 answers
RELEVANCY SCORE 85.6

can anybody suggest me in My computer in all c drive in windows in system there is a folder fun.exe.How can I delete this folder and which antivirus and spyware is good for removing this.

A:Fun.exe is automatically created in system files

Hello and Welcome.

It seems like this might be an autorun worm, and really an .exe file with a folder icon intended to deceive.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 85.6

My computer keeps showing Excell files being created. They are called "Bi-minutely", "Bi-Hourly", and "Bi-Daily". When I open them in Excell, they are blank spreadsheets. The file extension is .csv. These files are found in almost any directory on my computer. One day, I searched and found 320 of the files. The files are usualy on 2 to 5k in size. I think this is caused by a program that I had about 6 months ago called "MyAdvantage" where you got paid to surf the web. Any help in taking care of this problem would be appreciatedl. I did uninstall the MyAdvantage program, but it didn't seem to help.

Thanks,
Brad.
 

A:Excel: CSV Files Being Automatically Created

Read other 10 answers
RELEVANCY SCORE 84.8

Hello. I've started to have a problem with my PC. It automatically creates .exe files that are named by the folder they are into (e.g. Desktop.exe) for the folder that's created on desktop. When I try to open it sends me to Libraries folder and also pops some message that requires me administrator privileges.

Windows 7 Professional x64.

Any clues about this ?

A:.exe files with folder icon and name are created automatically

Sounds like you have a case of nasty malware. Run your anti-malware tools.

Read other 4 answers
RELEVANCY SCORE 84

Hey Guys,

I have been having too many virus issues these days.
I was able to remove the Trojan.vundo virus from my PC but it seems to be coming back again.

Also, there is another big issue!

for some reason i see that there are a lot of TMP files getting created in the system32 folder.

example of the file names are as follows
1. d371a50ae276b3279a42a7b683a260ce.TMP
2. b430ba5c7b05730ac8b0d106a404c258.TMP
3. 009f4dcdd2a980b5acc2d69b2ff02c0b.TMP
can someone please help me stop.
its making my hard drive full and i cannot work like this!!

Peace!
Milind
 

Read other answers
RELEVANCY SCORE 84

Hey guys, I plan to record PC gameplay using Fraps, which creates very large files. In order for me to do so whilst still maintaining high FPS in game, I have to record to my SSD. However, this fills up very quickly.

My idea is to make a program that automatically moves the recordings over to the HDD as they are created. Fraps has an option to split the recording up into 4GB segments, so what the program will need to do is detect when the second section has been created, then move the first across, then detect when the third has been created and move the second across etc.

Is this possible in an automated fashion? And if so, how would I go about doing it?

Thanks for any replies
Max

A:Program to automatically move files as created by Fraps

Ok, so I just had a quick play around with a .bat file and found that this works:


Code:
if exist "C:\Users\Max\Videos\Fraps\part2.avi" move /-y "C:\Users\Max\Videos\Fraps\part1.avi" "F:\Fraps\"
But I will need to implement it into a loop so that 'part2' and 'part1' change to 'part3' and 'part2' and so on within the code.

Also it will need to automatically check at a set frequency

Read other 1 answers
RELEVANCY SCORE 84

Hello everyone

My hard disk is becoming full due to files being created in c:\windows\system32 such as 049c61fa1d7d4fbc9f9b9412e97ee10e.TMP and 049c61fa1d7d4fbc9f9b9412e97ee10e.TMP and 09c76654ba40c2b03c41dae7ae97af06.TMP and hundreds of them, it keeps creating them until the HD is full, whenever I do cleanup, I have more space in my HD, in a short time, it creates even more ..

I read some posts and I realised I have to download Hijack this .. here is the log file
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:37:00 &#960;&#956;, on 5/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\... Read more

A:Loads of *.TMP files created automatically in c:\windows\system32

Hi, didowide

Welcome.

We want to try to get a sample of an unknown and suspicious file in your system and see what it is and what it does.

First download the attached catchme.txt to your desktop

Next,

Download catchme.exe from thespykiller forum here and save it to your desktop.

Double click the catchme.exe to run it and click on Add. A window will open with a list of files, select the catchme.txt on your desktop and press open. The files listed in it will appear in the catchme window. Now click on Zip to make a copy of this file which will be backed up to catchme.zip on your desktop.

Next, please go to TheSpykiller forum and upload this file so we can examine it. In order to do so, click on New Topic, fill in the needed details and give a link to your post here. ClIck on Browse and navigate to the Catchme.zip on your desktop select the .zip folder and once on the window, click on Post.( do not post HJT logs there as they will not get dealt with)

Please download the OTMoveIt by OldTimer.

Save it to your desktop.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

O20 - Winlogon Notify: adebcacabfbbfea - C:\WINDOWS\system32\adebcacabfbbfea.dll
Now close all windows and browsers, other than HiJackThis, then click Fix Checked.

Close Hijackthis.

Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and ch... Read more

Read other 1 answers
RELEVANCY SCORE 82

DDS (Ver_09-12-01.01) - NTFSx86 Run by Megha Mookim at 10:44:46.12 on Thu 02/04/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.592 [GMT 5.5:30]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeC:\WINDOWS\System32\svchost.exe -k HPZ12C:\WINDOWS\System32\svchost.exe -k HPZ12C:\WINDOWS\system32\svchost.exe -k imgsvcC:\Program Files\RealVNC\VNC4\WinVNC4.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\igfxtray.exeC:\WINDOWS\system32\igfxsrvc.exeC:\Program Files\Java\jre1.6.0_03\bin\jusched.exeC:\Program Files\EeePC\ACPI\AsTray.exeC:\Program Files\EeePC\ACPI\AsAcpiSvr.exeC:\Program Files\EeePC\ACPI\AsEPCMon.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\igfxext.exeC:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngi... Read more

A:Extra program files folder created automatically + iexplore.exe virus

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 18 answers
RELEVANCY SCORE 80

Hi All, Please help, I'm unable to open any of my important documents or pictures. Is there any way to get these corrupted files back? Many Thanks in advance DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 11.0.9600.17280  BrowserJavaVersion: 1.6.0_29Run by P-jizzle at 20:56:09 on 2014-09-30#Option MBR scan  is disabled.Microsoft Windows 7 Professional   6.1.7601.1.1252.44.1033.18.3070.1505 [GMT 1:00].AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ================.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exec:\Program Files\Microsoft Security Client\MsMpEng.exeC:\Windows\System32\spoolsv.exeC:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exeC:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exeC:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exeC:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exeC:\Windows\system32\lxbkcoms.exec:\Program Files\Microsoft Security Client\NisSrv.exeC:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer... Read more

A:DECRYPT_INSTRUCTION unable to open files

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/550337 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 16 answers
RELEVANCY SCORE 77.6

Hi,
I've got a situation here whereby .TMP files are appearing in network directories, and the files are going missing. The size of the TMP file matches the original file.
I'm trying to narrow down the issue, because I think there may be two problems here.  
1. Offline Files are enabled, to allow profile redirection.    It seems that this is also by default, is allowing Clinet Side Caching when there are network issues.  Does the original file (.doc for example)  get renamed
as a HR234.TMP for example when the Slow link detection sees slow performance? 
2.  If the above TMP file is created when there are network issues, should this resolve itself (sync itself back to the network) when performance improves?
Currently we are in a situation where we have a department that have files missing from many network shares, all the missing files seemlingly replaced with a .TMP file, so do we have to go round to every machine in the department, and manually
sync them to resolve this?  
 

A:TMP files created, files missing Offline files issue?

Hi,
 
After checking the Hotfixes and Security Updates included in Windows 7 and Windows Server 2008 R2 Service Pack 1 in the

Documentation for Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932), I found the following hotfix is available:
 
Temporary files do not synchronize correctly to a non-DFS share on a server from a client computer
that is running Windows 7 or Windows Server 2008 R2
 
Regards,
 
Sabrina

 
TechNet Subscriber Support
in forum.

 
If you have any feedback on our support, please contact
[email protected] posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.

Read other 7 answers
RELEVANCY SCORE 72.4

How do you recover lost/damaged files from a damaged disk (external)?

I'm not sure if its just damaged or crammed way too full but it started when I plugged it into another computer at the front along with another hard drive which I've never done at that particular computer before but I thought it would be fine since I always plug in both at the back of my own computer.
At the other computer this disk disappeared and only the other one showed up. So I plugged out the other one and tried to make it show up. It didn't and when i plugged it out "Drive H:\ needs to be formatted" showed up" I just kept trying at all the usb ports to failure.
I tried to plug it in my computer and my laptop leading to the same result.

I'm talking about a "1TB FreeAgent GoFlex Seagate", image http://www.geek.com/wp-content/uploads/2010/06/seagate_goflex_review_05.jpg. I took the butt part out and installed it in my computer directly. I think that's when the chkdsk utility showed up after windows started. I let it run when it started up. it finally showed up! The files still worked. but it was still almost full so I bought a new hard drive to transfer the files to and then format the old one and start clean, or so to say.

I plugged in my new hard drive and tried to transfer some files. It transferred some, but others gave me a few errors in transferring. Then I tried to transfer it to my laptop. It can't transfer directly from one external ha... Read more

A:Recover lost/damaged files from damaged external disk?

Read other 16 answers
RELEVANCY SCORE 70.8

Hi,
I already searched through alot of threads but could not find anyone having the exact same issue.
We have a Windows Server 2008 R2 Enterprise with SP1 which is hosting a DFS Namespace.
A customer of us works with his notebook (Win 7 SP 1) and has enabled Offline Files for his personal folder
in the DFS path. The initial synchronisation seemed to work and no sync errors are reported in Sync Center.

Now the problem is, everytime he opens a document from his DFS path and saves it, a .tmp file gets
created there and doesnt disappear. Not even after reboot. As far as i know it happens with Word, Excel and PDF documents.

If I log on to the server and browse to his path, i cannot see those .tmp files, only he can see it.
If I try to delete those files from his notebook I get an error "File is no longer located in... Verify the itemīs location and try again".
What I have tried so far:
If Offline Files get disabled, those .tmp files disappear. On activating they are visible again.
Tried "Delete temporary files" from Sync Center -> Manage Offline Files -> Disk Usage. Nothing happened.
I tried to repair Office, didnīt help.
The only Group Policy Settings we have relating to Offline Files are "Synchronize all offline files before logging off"
and "Allow or Disallow use of the Offline Files Feature" which is enabled.

Would be nice if someone can get me into the right direction to fix this issue.
If more information ... Read more

Read other answers
RELEVANCY SCORE 68

I have 300 mp3 files on my computer. Total size of the directory is 6 Gig worth of mp3's. Currently I have to drag and drop the mp3 files over to Windows Media Player to get the mp3's to play. I want to copy or burn half of the mp3's to a dvd. I want the dvd to start playing or at least to bring up some kind of menu when the dvd is inserted into a player. How do I burn the mp3 files to a dvd so the mp3 files will start playing from a dvd automatically?
 

A:How Can I Copy MP3 Files To A DVD So The Files Starting Playing Automatically

What kind of MP3 takes up 20Mb?
An MP3 DVD should Auto Play without any additional steps-check your auto play options. (Play using WMP).
Is this folder monitored by WMP? There should be no reason to drag an drop.
 

Read other 3 answers
RELEVANCY SCORE 66.4

Hi,

I am facing two different complications with external usb's

Problem 1: Hardware (?)
This usb IS recognized and mounts - however, the files on it are damaged - possibly because of hardware erosion...
I think ddrescue and safecopy are supposed to be good programs for this type of failure, but I do not know how to use them

Problem 2: Software (?)
This usb is recognized in the device manager, but not in the My Computer (so it doesn't mount). I think I can reformat the usb to make it functional again, but before I do that, I want to recover whatever files are on the drives

Any guide on how i can resolve these two issues?
 

A:Recovering files from a damaged drive and recovering files from an unrecognized driv

Read other 10 answers
RELEVANCY SCORE 62.8

i have some files that got deleted and after i restored them they are jumbled. the names on the files changed to something like this: $100347 or deleted**** and there is no extension that shows up after the name on the file, it is like this for text files and also for gif and jpg also. when i open text files they are just jumbled characters. with the gif and jpg they have file names and size but no image properties and when opening some have the same characters as the test files others just cant be found. is there anythiing that can be done to fix these files?
 

A:damaged files

How did you restore these files?
 

Read other 2 answers
RELEVANCY SCORE 62.8

Anyone who can recover my damaged .bkf files.
Thanks a lot!
 

A:my damaged .bkf files

Probably not.

It is possible that bkf is really zip. Try renaming them as zip and try a zip recovery program. But chances are small.
 

Read other 1 answers
RELEVANCY SCORE 62.8

I have a one folder in my photo archive which has about 800 jpg files. The first 620 are OK and can be opened normally. Then next one shows a good thumbnail, but when I open it I only see the top half of the photo and then it is grey below. From then on the files have no thumbnail and can not be opened in anything I have tried (lightroom 6.0, paint, Microsoft office 2010, powerpoint). I have scoured the web and tried the following with no success: Stellar Pheonix JPEG repair, JPEGsnoop, File Repair, PhotoRecoveryPro, Pandora Recovery, DigitalPictureRecovery Pro (demo). Can anyone offer any help please? The photos were taken in 2010 with a Nikon D40 and were saved directly as jpegs. All other photos are fine.
Many thanks.
 

Read other answers
RELEVANCY SCORE 62.8

I had copied several files to a cd using Kodak easyshare program. Later, I deleted all files from my hard drive to gain space. For some strange reason the files in my cd cannot be read, cd is blank (I had view these files from cd before). I installed a utility to recover undeleted files from my hard drive. very few files are good.
easyshare says files exist but might be damaged and I cannot view them.
Can someone help with this two-fold problem?
 

Read other answers
RELEVANCY SCORE 62.8

I'm only self taught, so not very technical. When doing a disc cleanup on drive C, it showed two damaged files. One showed a system 32 dependence, so I want to know if it can be fixed or what is my solution. The dependence is - C:\WINDOWS\SYSTEM32\ATL.DLL* - Is this important?​
 

A:damaged files

How or what program are you using to do this Disk clean up?

A screen shot of this message would also help?
 

Read other 1 answers
RELEVANCY SCORE 62.4

I found a similar problem reported on your site. I have deleted thousands of dll that were 93,184 bytes or 0 bytes in size. However, I need to get rid of what's creating them. This is my son's computer and it hasn't bee used in a few weeks but this worm filled up the C: drive. I ran Hijack This and I'll put the log in this post.

Thanks,

Al

Logfile of HijackThis v1.98.2
Scan saved at 4:44:50 PM, on 10/8/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE
C:\WINDOWS\SYSTEM\NETIS.EXE
C:\WINDOWS\ATLWJ32.EXE
C:\WINDOWS\SYSTEM\SYSOL.EXE
C:\WINDOWS\SYSTEM\APISQ32.EXE
C:\WINDOWS\SYSTEM\D3OS.EXE
C:\WINDOWS\SYSTEM\MSBL.EXE
C:\WINDOWS\ATLRM.EXE
C:\WINDOWS\SYSTEM\CRKH.EXE
C:\WINDOWS\SYSTEM\CROE.EXE
C:\WINDOWS\D3AD.EXE
C:\WINDOWS\CRMV32.EXE
C:\WINDOWS\APPLC32.EXE
C:\WINDOWS\SYSTEM\PTUDFAPP.EXE
C:\WINDOWS\SYSTEM\D3LI.EXE
C:\WINDOWS\JAVAUZ.EXE
C:\WINDOWS\IPUF32.EXE
C:\WINDOWS\ADDRS32.EXE
C:\WINDOWS\SYSTEM\IPQB32.EXE
C:\WINDOWS\SYSTEM\CRQZ.EXE
C:\WINDOWS\NTNB32.EXE
C:\WINDOWS\SYSTEM\MFCCI.EXE
C:\WINDOWS\SYSTEM\ATLWI.EXE
C:\WINDOWS\MSGI32.EXE
C:\WINDOWS\SYSTEM\MSPO.EXE
C:\WINDOWS\JAVAGN.EXE
C:\WINDOWS\SYSTEM\D3RO32.EXE
C:\WINDOWS\SYSTEM\APIDK32.EXE
C:\WINDOWS\ATLEN32.EXE
C:\WINDOWS\MFCOY.EXE
C:\WINDOWS\SYSTEM\NTTZ.EXE
C:\WINDOWS\SYSTEM... Read more

A:Many new .dll files being created

Read other 6 answers
RELEVANCY SCORE 62.4

At least, that's what the Micro$oft tech support weenie said.

I'm running Win 7 on a HP/Compaq laptop. 3GB of ram.

This all started when I got the following when I opened a window for Windows Update. It said:#elementModuleHeaderText#
#actionCustomInstallImportantText#
#actionCustomInstallOptionalText#

​and then there was a button (which normally has text in it) that was completely blank.

Surely there is something missing.

The tech weenie ran a program called AUTORUNS.exe, and then said that there were "many" files that were missing or damaged ... most were in the Temp directory and were named similar to:{4AEF3E06-158F-47EF-904C-0200E1D572D6}
​I think I don't care about them.
Some were CODEXs for videos and were listed as over 13 yrs old. I know I don't care about them.

Some others were:rdpclip
aspnet_state
​My Diagnosis is I'm missing some data file somewhere or maybe a registry entry.

M/$oft wanted $150 to load me up with a virus and crudware program and monitoring plan that would "most likely" fix the problem. I declined.

SO.... How do I fix the problem, eh?

_________________
Data from SYSINFO
_________________
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II P320 Dual-Core Processor, AMD64 Family 16 Model 6 Stepping 3
Processor Count: 2
RAM: 2810 Mb
Graphics Card: AMD M880G with ATI Mobility Radeon HD... Read more

A:Missing / damaged files in Win 7

Howdy, and welcome.

What exactly is the problem?
 

Read other 3 answers
RELEVANCY SCORE 62.4

Had (have) a virus that seems to have modified some system files.

The taskbar and desktop icons disappear and reappear every few seconds. On rebooting, the "Window File Protection" program runs and after nearly an hour it asks that I insert disk 2 of XP Pro through five iterations. Sadly, this Compaq came preloaded with XP and I have no disks.

Is there a way to identify the affected files and download them direct from Microsoft?

Thanks for the help!
 

A:Damaged System Files-XP Pro SP2

do you have an anti-virus? Most anti-virus' can identify what you are dealing with. Once you know what it is, a quick google search can usually yield detailed removal instructions.

However, if your system files have changed, and you don't have any backups, there isn't a whole lot you can do.

I recomend that you write down your windows serial number, and borrow a windows XP disk off of a friend. Use that disk to either re-install (using your serial of course) or use it to recover your damaged system files.
 

Read other 2 answers
RELEVANCY SCORE 62.4

So here is what happened, in steps:

1) Started BitLocker encryption on drive E:
2) Power failure interrupts the process around %17
3) Could neither access drive E: nor continue BitLocker encryption
4) After some search, found out that BitLocker Repair Tool can recover a drive to "an empty output volume of equal or larger size than the BitLocker-protected drive"
https://technet.microsoft.com/en-us/...=ws.10%29.aspx
5) Did that. After the decryption process, used "chkdsk /f", to check for and fix errors.
6) After that, formatted drive E: and re-copied its content back in
7) Found out the next day that some files are not working. Text documents have scrambled symbols in them, for example. Rar, pdf, iso, jpg, doc.. All kinds of files are affected.
Interestingly, the same files in multiple folders within the drive do not work in any of the locations.

I did a loooooong search, but all I could find was thousands of posts everywhere on "How To Recover A File From A Damaged Drive".
But I do have the files. They are already "recovered".
Still, tried a bunch of recovery tools, even though I already knew that it was futile, since:

a) I had already copied the content of the drive in question back in it.
b) It is not that the files are missing. They somehow remained "scrambled", I believe. They don't need to be recovered. They need to be "repaired", maybe, don't know how, but with the "BitLocker Recovery Key" file... Read more

A:BitLocker Has Damaged Some Files

Bitlocker can not be interrupted, but more importantly, there`s no reason to use it.

Read other 3 answers
RELEVANCY SCORE 62.4

Hi:
 
We have been having problems with our PC for a while now, and I keep doing virus scans and cleanups, but to no avail. Today, I went into Safe Mode and was looking around and stumbled on various lists of what's on my computer in System.
 
One of the lists (Internet Settings - Internet Explorer - File Versions) noted that two files were missing:
    iecont.dll
    iecontlc.dll
 
Another list, also in Internet Settings (Cache - List of Objects), noted that the following file was damaged:
   9FlCllAA-197B04942BA54
 
Would this explain why we get booted out to a black screen every once in a while (3 times, yesterday) which never returns us to what we were working on; we have to turn off the computer and start again?
 
And how do I fix the damaged file and retrieve the .dll files?
 
Thank you,
Elizabeth
 

A:Missing and Damaged Files

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Read other 6 answers
RELEVANCY SCORE 62.4

My all office files are changed to mp3 format. Then I renamed it to it original format(to .doc , .xls) but it looks damaged when I opened it.

A:My office files are damaged

Unfortunately, you have been infected with a ransomeware known as TeslaCrypt 3.0.  For more information, please read this post by quietman7 then post in the following thread...
 
http://www.bleepingcomputer.com/forums/t/605185/teslacrypt-30-xxx-ttt-micro-mp3-support-topic/

Read other 1 answers
RELEVANCY SCORE 62.4

i have a compaq laptop with vista home edition. i have the paid versions of AVG and Pc tools registry mechanic. The past few weeks my laptop is slow to boot up. It gets to the desktop and I cannot open anything so I have to shut down. If I can open software then halfway thro my work it will freeze and say not responding. It will be like this for hours so again i have to shut down. I have downloaded hyjack this and below is the results. Can anyone help please?Logfile of Trend Micro HijackThis v2.0.4Scan saved at 19:29:28, on 27/08/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v7.00 (7.00.6002.18005)Boot mode: NormalRunning processes:C:\Windows\System32\smss.exeC:\Windows\system32\csrss.exeC:\Windows\system32\wininit.exeC:\Windows\system32\csrss.exeC:\Windows\system32\services.exeC:\Windows\system32\lsass.exeC:\Windows\system32\lsm.exeC:\Windows\system32\winlogon.exeC:\Windows\system32\svchost.exeC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exeC:\Windows\system32\rundll32.exeC:\Windows\system32\svchost.exeC:\Windows\System32\spoolsv.exeC:\Windows\system32\WLANExt.exeC:\Windows\system32\svchost.exeC:\Windows\System32\alg.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedul... Read more

A:Damaged system files?

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open wit... Read more

Read other 2 answers
RELEVANCY SCORE 62.4

Hello,

I recently had to do a complete reinstallation in Windows XP. I thought my files were backed up but they weren't. I now have a new computer and have Vista. Through a recovery service, I was able to locate the files but they are damaged according to Quicken when I tried to restore them. Is there any way to fix damaged files? I appreciate your help.
 

A:Quicken Damaged Files

Read other 6 answers
RELEVANCY SCORE 62.4

My all office files are changed to mp3 format. Then I renamed it to it original format(to .doc , .xls) but it looks damaged when I opened it.

A:My office files are damaged

Unfortunately, you have been infected with a ransomeware known as TeslaCrypt 3.0.  For more information, please read this post by quietman7 then post in the following thread...
 
http://www.bleepingcomputer.com/forums/t/605185/teslacrypt-30-xxx-ttt-micro-mp3-support-topic/

Read other 1 answers
RELEVANCY SCORE 62.4

I was looking At comp's files the other day, And I happened to noticed That there were some Damaged Java files on my harddrive. Needless to say I didnt delete them for fear that It would mess up the Java thingy in my browser.
Now I was Wondering Would it be safe to Delete those without Messing Up the Java Thingy in my browser which some websites need to run ? Sorry for my great puter lingo here lol.
Your imput is always greatly Apprceiated!!
Denim
 

A:Damaged Java files

You can always delete them, but leave them in the recycle bin until you are sure that you can remove them completely. Also, if a web page requires java and you don't seem to have it (deleted or corrupted), it should prompt you to download new java console drivers (I think). Either way, if they are corrupted, the java won't work until you reinstall the java "thingy".
 

Read other 3 answers
RELEVANCY SCORE 62.4

At least, that's what the Micro$oft tech support weenie said.

I'm running Win 7 on a HP/Compaq laptop. 3GB of ram.

This all started when I got the following when I opened a window for Windows Update. It said:#elementModuleHeaderText#
#actionCustomInstallImportantText#
#actionCustomInstallOptionalText#

and then there was a button (which normally has text in it) that was completely blank.

Surely there is something missing.

The tech weenie ran a program called AUTORUNS.exe, and then said that there were "many" files that were missing or damaged ... most were in the Temp directory and were named similar to:{4AEF3E06-158F-47EF-904C-0200E1D572D6}
I think I don't care about them.
Some were CODEXs for videos and were listed as over 13 yrs old. I know I don't care about them.

Some others were:rdpclip
aspnet_state
My Diagnosis is I'm missing some data file somewhere or maybe a registry entry.

M/$oft wanted $150 to load me up with a virus and crudware program and monitoring plan that would "most likely" fix the problem. I declined.

SO.... How do I fix the problem, eh?

A:Missing / damaged files in Win 7

Open a Elevated Command Prompt.

Click on the Start button and type cmd.
DO NOT press Enter or click Go.
Look at the upper part of the window and you will see cmd.exe.
Right click on it and select Run as Administrator

Run the following:

Dism /Online /Cleanup-Image /StartComponentCleanup
Dism /Online /Cleanup-Image /RestoreHealth
SFC /scannow

See if that helps. Be patient as these can take awhile to run.

Read other 5 answers
RELEVANCY SCORE 62.4

Hello, I've been trying to install a program called Band-in-a-box, and havent been having much luck. I get through the install process fine, but when i try to run it, at first i had a message come up saying SHELL.DLL was missing. I referred to another thread which addressed that problem and fixed it. Now i get "One of the library files needed to run C:\BB\bbw.exe is damaged. Please reinstall this application." Im not sure how to fix this, so i greatly appreciate any help. Just in case i've included my hjt log. Thank you.
 

A:library files damaged?

See if this will help you any http://www.techspot.com/vb/archive/index/t-19430.html

if not do a rescue install of xp

let us know
 

Read other 3 answers
RELEVANCY SCORE 62.4

Where get effective a zip recovery software for corrupted archives? How to recover damaged ZIP files?

A:How to recover damaged ZIP files?

Sometimes faced with a situation where archiver refuses to unpack ZIP format tainted because of the internal structure. 
Similar trouble happens for a variety of reasons: the incorrect delivery by e-mail archive, incomplete (partial) file 
downloading from the Internet, copy data from corrupted media.
To repair a corrupt zip file you need a special zip repair tool, like
ZIP Recovery Toolbox. It read and extract files 
from archive on HDD. Later you can re-create archive again from a saved files.
http://www.oemailrecovery.com/zip_recovery.html

Read other 19 answers
RELEVANCY SCORE 62.4

Hi,

I had the security tool virus 2 days ago. All sorts of pops up came up. I thought it had been removed with mbam. But the next morning I switched on the laptop and all exe files were damaged. I tried to restart again and now there is no task bar, no icons and no desktop.

The only thing I can use is cntl alt del for task manager. I have rescued the data that I need except some very important emails. I need to access outlook express to get the emails back. I cannot access and hidden files.

I have been reading for over 1 day now and tried all suggestions.

I cannot load safety mode (F8). I cannot boot from disk on start up.

I can use mbam and it keep finding about 11 issues. I remove them and restart but the problem persists.

I hope i can save the laptop.

Please help if you are able.

Many thanks

I am running windows XP

The errors given by mbam include:

Trojan.Cutwail
Trojan.Agent
Malware.Trace

A:All .exe files damaged - no desktop

Hello and welcome. You may need to run this from a USB or by burning it to a CD. Or copying it into the Task Mananger folder.Run this Do Not reboot then rerun MBam. Reboot after MBAM.Please download Rkill by Grinler and save it to your desktop.Link 2Link 3Link 4Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan (normal mode).After scan click Remove Selected, Post new scan log and Reboot into normal mode.If you cannot use the Internet,you will need access to another computer that has a connection.From there save mbam-setup.exe to a flash,usb,jump drive or CD. Now transfer it to the infected machine, then install and run the program. If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe so it will install on... Read more

Read other 18 answers
RELEVANCY SCORE 62.4

I have a really weird problem. I am running Windows Vista Home Premium. I have a Cannon Rebel XT EOS 350D camera. Until recently I had no problems downloading images from the camera to the computer. Recently I downloaded pictures and then viewed them in Windows photo gallery. Initially the thumbnails appeared fine. Then as I watched each image changed and the files themselves were damaged. I tried to open them in Photoshop and got a message that said "This document may be damaged (the file may be truncated or incomplete". Since then that has happened each time I tried to download images.

I have tried using Nero to download and view the files with the same result. I have tried downloading them and then immediately opening them in Photoshop without viewing them, but again got the same error message.

I have been unable to find anything about this problem doing internet searches. Any help would be appreciated.
 

A:Damaged Image Files

Read other 6 answers
RELEVANCY SCORE 62.4

Windows XP

So I transfered about 250 pics and 10 vids from my camera to my computer, I put them in a seperate folder in MY PICTURES, about a month went by and I went to open them (to save them to a disc) and they wouldn't open. I had opened them numerous times before and there were still preview pics on the outside of the folder and those pics change if I rearrange the pics inside the folder. I searched for them with Picasa and my Computer Search, I looked in my Temp Internet folder and my temp folder. I did use a registery cleaner (Easy Cleaner) but I've used before with no problems. Also it is only a problem with the most recent pics, which where transfered from the camera...all my other pics were copied from a disc the computer.
While I was searching for them I found I could access previews of the pics in Microsoft Digital Image Editor but when I tried to open them they would give me a message saying "File Name to Short, File may have been damaged or corrupted". Also when I open the folder there are windows icon's where there were once pics and it gives the size and date last edited...all the last edited dates are the same and within one minute of each other.

Arggg, So to me that says they are here somewhere I just don't know how to bring them back.

Help Please
 

A:Damaged or Corrupted Pic and Vid files

Here's what I'm hoping happened. I'm going to say you don't have the show extensions for known filetypes checked in your folder options. I'm going to further say that somehow the extensions for your pictures in that folder where changed and now Windows does not recognize them as photos, or anything at all, but it knows something is there and so you still get the generic icon. I'm going to further speculate that the size reported for the files represented by the mysterious icons is roughly equivalent to the expected size of the individual photos and/or videos that have gone missing.

If none of the above is true you might be out of luck. So do you know what the extension of your photos was-is? I'll say they are .jpg for example, right click on one of the icons in the folder where you lost them and rename it to Myphoto.jpg and hit enter. Did it come back to life as a photo icon? If so, you're in business.

IF not, well you've searched already, searching some more is the only hope left I would think.

Good luck.
 

Read other 1 answers
RELEVANCY SCORE 62.4

hi, i left my computer on while at work only to come back to seeing that win 8 pro had had to stop (it was on screen telling me this and that i needed to restart - a nice bsod perhaps?). i restarted and it seemed to take forever to load up with loooonnnggg breaks in between screens changing and not showing my dekstop shortcuts.

i ended up loading up my win 8 install disc and going to a command prompt to run chkdsk /b /r. this came up with lots of sectors where chkdsk needed to replace bad sectors or something (where it utilises spare sectors instead - familiar with this?). so i let it finish but at the end it said it couldn't save the log file (piece of crap!) and i lost the visible report on screen so i have no way of knowing what files were affected by these errors!!!!

i've done an sfc and it checked out fine (apparently). altho i don't know if windows is clever enough to know that files may be damaged or if it only checks that they are present? - the latter not being very helpful.

so at the moment i am verifying individual steam games ( quite a few are reporting dodgy files and then redownloading them). is there a way to batch verify all games? (it would make sense for steam to implement!)

i have quite a few games that aren't steam activated so that makes it very hard to verify the files.

i have got another HD to use as a backup with a system image but i've done quite a bit of moving around since the backup. also windows decided to backup on schedule and i stopped it ... Read more

Read other answers
RELEVANCY SCORE 62.4

Two years ago my computer crashed. I now have a new hard drive. I had Geek Squad put all my file on a disk, however, a few are damaged. These are genealogy files that took me years to compile. Most are Jpg images of newspaper articles and censuses. I see online a lot of repair programs but when I download them, they only recover one file and then you have to buy it. I would buy it but I can't afford fifty dollars! Are there any cheaper ones or a cheaper way to recover these two folders?

A:How to restore damaged files

I would try 2 things

1. Recuva: Download Recuva 1.40.525 - FileHippo.com
2. A live Linux CD

Both options are free.

Read other 8 answers
RELEVANCY SCORE 62.4

Hi,
After several bouts with various adware and trojans I ended up deleting some files. Now I keep getting notices on start up regarding "D0CE0C16B1" and "AUNPS2.DLL" I have downloaded the "Hijakthis", runit and here it is a file of the scan for your review. How can I restor or at least get rid of these notices?
Thanks
 

A:damaged or missing files

Go to this post here first, and follow the instructions EXACTLY, especially about UPDATING and HJT-location.
How to remove Begin2Search/Coolwebsearch and Other Nasties
Then see How to post your Hijackthis log-files.

Do NOT post any Word doc-files. Too risky for viruses!
Use a .txt instead, as mentioned in the above post.
 

Read other 1 answers
RELEVANCY SCORE 62.4

When booting getting multiple Bad Image error windows as wellas when opening apps that reads:
Bad Image The application or DLL C:\WINDOWS\system32\perfc000.dat is not a valid Windows image. Please check this against yourinstallation diskette.

Could this have happened from virus damaging registry files or something else?

Thank you much.
 

A:Registry Files Damaged???

Closing duplicate thread, please continue here: http://forums.techguy.org/security/578465-hijackthis-log-getting-bad-image.html
 

Read other 1 answers
RELEVANCY SCORE 62

Unwanted encoding messages on opening MSWord files. Inability to open MSExcel files and picture files. Apparently corrupted files?I am having problems opening .doc and .xls and .jpg files in some (but not all) folders in my folder tree, e.g. C:\Documents and Settings\(username)\My Documents\Folder X. However, Folders Y and Z are apparently unaffected. This has arisen only recently.My system is Windows XP (Home), and SP2 upgraded to SP3.MSWORD EXAMPLE:- On opening a Word file (whether from Word or from Windows Explorer) I receive this dialog box;"File Conversion - (filename).doc""Select the encoding that makes your document readable." The already selected button is "Other encoding" and the suggested code is "Japanese". The preview pane shows only an array of characters, all the same.On trying to select the button "Windows (Default)", the preview changes to a continuous array of lower-case xxxxxxx. On returning to the "Other encoding" option and trying "Auto-Select", the selected code returns itself to "Japanese" with the display as already noted above.On returning to the "Other encoding" option and trying "Western European (Windows)", the display reverts to the Windows Default style as already noted above, lines of xxxxxxx. I am unable to open the file.MSEXCEL EXAMPLE:- On opening an Excel file, all I get is an immensely long string of a character in ... Read more

A:Unwanted encoding messages on opening MSWord files. Inability to open MSExcel files and picture files. Apparently corrupted files?

This sounds like it might be a malware infection.

Have you run any scans lately?

Did you download BackUp4All from a reputable source?

Read other 6 answers
RELEVANCY SCORE 61.6

Hello there bleepingcomputer.com, I'm Edoardo and I've been infected by some strange piece of malware. It attached to most of my dll files, exe files, even htm and html files! Not sure about the rest. And when playing certain games, for example, call of duty 4: Modern Warfare, it would create a "srv" copy of the exe that was being ran; for instance, I was using "iw3mp.exe", and when ran, it would generate "iw3mpSrv.exe", which MalwareBytes would detect as "Malware.Packer" and then delete. So what I did was, after many attempts with MalwareBytes (which would detect just a couple of files), was trying out DrWeb CureIt software, and it found a lot of infected files, I just clicked on "Neutralize" and rebooted the system. I'm not sure if the infection is gone though. I'd like technical help if possible.
 
FRST log:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01
Ran by Edo (administrator) on HAF-X on 20-04-2015 15:00:39
Running from D:\Download
Loaded Profiles: Edo (Available profiles: Edo)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will... Read more

A:"srv" version of .exe files being created

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/573803 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 26 answers
RELEVANCY SCORE 61.6

Hi, I?m a college student and found someone running something on my machine. I'm not sure exactly what it was, I deleted it right once I saw him running it but it did do some weird things. It tried running a lsass.exe from my temp folder, the user temp folder. I deleted it from my temp folder but also some randomly named exe files that were created right then as well as some .tmp files. They were not running at the time so I deleted them. There was an auto start entry for the bad lsass.exe in the registry so I quickly deleted that. I don't see any signs of stuff left but I'm worried there is possibly a rootkit or something left and I am not knowledgeable enough to determine if it?s clean. I'm trying to clean it instead of reformatting just because schools about to start again and I'm hoping that we can fix it. Thanks.

I'm running win 7 64 bit ultimate with mse and windows firewall. I also have windows 7 firewall control plus installed. Mse picked off two things, from the history they were Trojan:Win32/Nebuler.J and PWS:Win32/Tacsasi.A and both were in my user appdata local temp folder, the same folder that lsass.exe was in. One thing I noticed was that lsass.exe was a 32 bit exe from the task manager so maybe since I am 64 bit that?s why my system didn't seem to be too badly hit?

I can't run gmer for any worth, it throws an error and when I looked it up it seemed to be that the program is not fully compatible with 64 bit windows yet.

Here is the dds



DDS (Ver_... Read more

Read other answers
RELEVANCY SCORE 61.6

Recently re-installed WXP after Computer Crash.

Copied "My Documents" folder from thumb drive to the computer
.
Noticed several folders in "My Documents" were missing so thought I didn't back up to the thumb drive often enough so figured they were lost in the crash.

Wasl looking for a file and was unsure in which folder it might be located so did a "search" and found it in "My Documents". Went back to the "My Documents" folder and it wasn't there so did another search. This is what I discovered:

I went into Windows Explorer and found "My Documents"

I went into "My Computer" and then the "C" drive and found Documents and Settings, Gary, My Documents in the tree

Further down the tree I found the "C" Drive again and found Documents and Settings, Gary's, My Documents.

It appears there are 3 "My Documents" on my computer and of those down the tree had the missing folders I was looking for.

This is strange because after the computer crash I inserted the WXP Install disk and it wiped out all of my files and programs before installing. When the install was complete I had to install of my programs, printer, scanner etc. I then transfered the "My Documents" folder from the thumb drive to my computer. Since all of the programs were wiped clean, where did the 3 versions of "My Documents" come from.

Under Windows Explorer there is:
"My Documen... Read more

A:How Are These Duplicate Files Created?

Someone accidentally/intentionally moved the contents while browsing around your computer, creating your phenomenon. Could have simply not formatted during installation of windows, so windows worked it's magic and retained the references to the documents.
 

Read other 1 answers
RELEVANCY SCORE 61.6

Hi Folks,I noticed recently that I have some unknown files in my Windows>Temp folder. These files (8 in total) are named like so......cteng_1_1_131267855225.datEach one has a date stamp with yesterdays date - 6th March 2010I did google to see if I could find out anything about them but came up only with 'Incredimail' - this is not a programme I had heard of or use!I'd be most grateful if someone could take a look at my logs and keep me right.btw - I'm not sure that GMER worked properly for me - most of the options were greyed out and I was unable to either select or de-select a number of them - however I attach what I fear may just be a blank gmer generated file!Thanks!......DDS (Ver_09-12-01.01) - NTFSX64 Run by Sinclair at 8:25:11.59 on 07/03/2010Internet Explorer: 8.0.6001.18882Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.6133.4313 [GMT 0:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestri... Read more

A:Unknown files being created

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%�... Read more

Read other 8 answers
RELEVANCY SCORE 61.6

I have two systems, one with vista ultimate 32bit and the other vista 64bit home premium.

I have decided to run Kaspersky internet security + Malwarebytes (scanner only) + SUPERantispyware (scanner only) on both

Maybe Truealarm force field when a 64bit version comes out, not going to run it now though.

My question is that I have read that these programs create files or something that are not erased on their own. Is this true and if so what is the best program to take care of this?

Thanks!

-Kevin

Read other answers
RELEVANCY SCORE 61.6

In my %windir%\system32\ folder is something creating a lot of TMP files (MBs, GBs). It looks like winlogon process creates them. Is it virus, is it corrupted Windows XP SP2? Thank You!
 

Read other answers