Over 1 million tech questions and answers.

Solved: Clearing Firewall Logs in AVG 8.0

Q: Solved: Clearing Firewall Logs in AVG 8.0

If anyone who has AVG Internet Security 8.0 has found a way to clear the firewall logs, I would love to hear about it.

It seems the clear button they had in 7.5 to clear out the firewall log is missing in 8.0... along with the tech support they had for 7.5 I have not been able to locate another setting anywhere within AVG to set it so the log will clear either.

Any assistance would be appreciated.

RELEVANCY SCORE 200
Preferred Solution: Solved: Clearing Firewall Logs in AVG 8.0

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Solved: Clearing Firewall Logs in AVG 8.0

I finally heard back from AVG and this is how the firewall logs can be cleared in the paid version 8.0:

You can delete the log files opening the following directory:
C:\Documents and Settings\All Users\Application Data\avg8\Log
There you can find all log files created by AVG. Firewall logs start with avgfw8...

Read other 1 answers
RELEVANCY SCORE 59.6

Every time I try to clear an IIS log file, it says "cannot access denied.... the file may be in use" Tried stopping the service and deleting, but still no joy. Any ideas?
 

A:clearing IIS logs

Read other 7 answers
RELEVANCY SCORE 58.8

is there a way to clear the logs from mcafee?

A:clearing mcafee logs

McAfee log entries are automatically deleted after 30 days.

Read other 3 answers
RELEVANCY SCORE 58

How can you clear the event logs without an event being created stating that the logs were cleared in Powershell? The "clear-eventlog" command does clear the events, however it leaves behind an event that states that the logs were cleared.
Anyway to get around this and totally clear the logs?
Thanks,

Read other answers
RELEVANCY SCORE 58

Hi everyone, I'm hoping that this wonderful community got some help for me.

I've previously done image deployment with Windows 7 and know how to prepare an image for deployment.

I'm now trying to make an image with Windows 8.1 enterprise.

I'm making an image with with PersistAllDeviceInstalls to keep the hardware configuration.
I use the gui to run sysprep oobe with generalize option checked.

After its completed, I make an image of it and deploy to test laptop 2 with the exact same specs.

After its done, and I boot it up and finish all the preparation (like computer name etc), the system boots up to the desktop.

However, here is where I realized I'm most likely doing something wrong.

The event logs are filled with data from pre-sysprep, Symantec Endpoint Protection logs are still there.

Can someone help me out here? Isn't generalize suppose to remove logs and stuff?

It's been almost 2 years since I touched sysprep and all. Hopefully someone here can shed some light about the issue I'm facing.

All help is sincerely appreciated.

A:Sysprep generalize not clearing logs

Hi Neevar, welcome to the Eight Forums.

First this warning about Sysprep GUI (from https://technet.microsoft.com/en-us/...h825084.aspx):

   Warning
In Windows 8.1, the Sysprep user interface is deprecated. The Sysprep UI will continue to be supported in this release however it may be removed in a future release. We recommend that you update your Windows deployment workflow to use the Sysprep command line. For more information about the Sysprep Command line tool, see Sysprep Command-Line Options.

To generalize your image without an answer file use command:

Code:
%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown


The closing option (highlighted) can be shutdown, restart or quit.

To generalize your image with an answer file use command:

Code:
%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /unattend:X:\MyAnswerFile.xml


Change the answer file path and name (highlighted) accordingly

Event logs should be cleared when the /generalize switch is used. This from Microsoft TechNet support article https://technet.microsoft.com/en-us/...v=ws.10).aspx:






Generalize:
Prepares the Windows installation to be imaged. If this option is specified, all unique system information is removed from the Windows installation. The security ID (SID) resets, any system restore points are cleared, and event logs are deleted.

The next time the computer starts, the specialize configuration pass runs. A new secu... Read more

Read other 7 answers
RELEVANCY SCORE 58

I was wondering if there was any way to clear Security, Application, and System logs on a PC remotely.... We have been infected with W32.Gaobot and it fills up the logs quickly...

Any information would be great.
Thanks!
 

Read other answers
RELEVANCY SCORE 58

Is it possible to prevent JRT from clearing the event logs?
 
What is the reason behind this feature?  Event Logs are often crucial for diagnosing Windows issues.  I'm not aware of any reason that the event logs should be cleared to help with junkware removal.  Please help me understand the reason for this feature, and if possible, provide away to disable it.
 
Thanks!

A:Is it possible to prevent JRT from clearing Event Logs?

JRT's disclaimer clearly states: "This software is provided "as is" without warranty of any kind. You may use this software at your own risk."However, you can ask a question (leave a comment/suggestion) on Thisisu's JRT Blog.

Read other 12 answers
RELEVANCY SCORE 57.6

Are there incoming and outgoing logs for the Vista Firewall that can be viewed?
If so, how do you view them and where are they?
 

A:Solved: Windows Vista Firewall Logs

Read other 9 answers
RELEVANCY SCORE 57.6

If you have a lot of entries in the event logs, depending on your system, it can take a bit to open the logs.  Here is a way to clear all the 4 main event logs quickly.
Open a text editor (e.g. notepad), and copy the following into it.
 

@cls
@echo on
wevtutil.exe cl Application
wevtutil.exe cl Security
wevtutil.exe cl Setup
wevtutil.exe cl System
@echo off
pause
Save it as "clear_logs.bat" (no quotes).  Now, just double click on the file, and all 4 main logs will be cleared.  It will not work on Windows XP.
 
This will work on Windows 8.1 for sure.  It should work on Windows 8, 7, maybe Vista.
Have a great day!

 

Read other answers
RELEVANCY SCORE 56.8

The is another attempt at getting this answered.
Previous replies noted that the Administrative Events under the Custom view was just a compilation of all the other logs.
I do not belive this is entirely correct as all the events in this log concern the operating system and do NOT appear in the other logs such as Application, Security, etc.
Below is an example of what is showing up on my system after all the individual logs shown under Event Viewer are cleared:




Level


Date and Time


Source


Event ID


Task Category




Warning



8/27/2015 13:59


Microsoft-Windows-DNS-Client



1014


None




Error



8/27/2015 12:56


Microsoft-Windows-Kernel-EventTracing



2


Session




Error



8/27/2015 12:56


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/27/2015 12:54


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/24/2015 9:15


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/24/2015 9:13


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/20/2015 3:19


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/20/2015 3:17


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/17/2015 10:24


Microsoft-Windows-... Read more

Read other answers
RELEVANCY SCORE 48.8

I have been using PrivateFirewall for a long time and it works perfectly for me.
 
When I recently changed my AV from AVG 2015 Free to Avast Free, the number of FW logs increased enormously. On checking the Local IP`s they are all private addresses to do with the Internet. My FW blocks them. If I rate these IP`s as "trusted", it reduces the number of logs, but as the Remote IP`s often differ for the same Local IP`s, the logs keep coming.
 
Why did this happen when I changed my AV to Avast and how can I stop it ?

A:Firewall Logs

Private IP's are local network traffic, they arent routable to the internet. Maybe Avast is using a "cloud" real time technology? Turn off logging? A log may be helpful.

Read other 17 answers
RELEVANCY SCORE 48.8

Hi I was going through the routers firewall logs when it restarted for no reason and on relooking in the logs I noticed these entry's.

11:52:23 2 Jul NMON: Machine restart triggered by Linux kernel.
11:52:19 2 Jul bye!
11:52:19 2 Jul usbmgr: do_mount need not to unmount
11:52:19 2 Jul usbmgr: do_mount action 2
Why would it do this? I only ask as it has never done this before in all the time ive had it.
I was looking at these logs when it happened and could find no information on them. Are they a sign of any type of attack?

06:13:07 2 Jul IDS proto parser : tcp null port (1 of 1) : 115.236.59.28
***censored-ip*** 0060 TCP 0->0 [.FAR.P] seq 3029953125 ack 0 win 80

22:57:31 1 Jul IDS proto parser : tcp null port (1 of 1) : 115.236.59.28
***censored-ip*** 0060 TCP 0->0 [SFAR..] seq 2071863911 ack 0 win 80

18:04:20 1 Jul IDS proto parser : tcp null port (1 of 1) : 115.236.59.28
***censored-ip*** 0060 TCP 0->0 [SF.R..] seq 3029953125 win 80

18:55:56 29 Jun IDS proto parser : tcp null port (1 of 2) : 115.236.59.28
***censored-ip*** 0060 TCP 0->0 [....U.] seq 2071863911 win 80

16:22:56 29 Jun IDS proto parser : tcp null port (1 of 1) : 115.236.59.28
***censored-ip*** 0060 TCP 0->0 [.F.RUP] seq 2071863911 win 80

07:52:15 29 Jun IDS proto parser : tcp null port (1 of 2) : 115.236.59.28
86.158.150.99 0060 TCP 0->0 [..AR.P] seq 3029953125 ack 0 win 80

02:05:15 29 Jun IDS proto parser : tcp null port (1 of 1) : 115.236.59.28
***censored-ip*** 0060 T... Read more

Read other answers
RELEVANCY SCORE 48.8

I have been using PrivateFirewall for a long time and it works perfectly for me.
 
When I recently changed my AV from AVG 2015 Free to Avast Free, the number of FW logs increased enormously. On checking the Local IP`s they are all private addresses to do with the Internet. My FW blocks them. If I rate these IP`s as "trusted", it reduces the number of logs, but as the Remote IP`s often differ for the same Local IP`s, the logs keep coming.
 
Why did this happen when I changed my AV to Avast and how can I stop it ?

A:Firewall Logs

Private IP's are local network traffic, they arent routable to the internet. Maybe Avast is using a "cloud" real time technology? Turn off logging? A log may be helpful.

Read other 17 answers
RELEVANCY SCORE 48.8

I am not sure if this belongs here or not. Maybe one of you can help me. Ever since I have had the previous problems sysprotect and spyfalcon , I have seen internet attacks come across my trend micro. Sometimes they are echo requests, and other times they are other things.

My Modem's firewall log is as follows (1st page)

Firewall Log
Date: April 13, 2006
Time: 15:21:8

Log Entry:
Log Date Time Dir/Source Sv Rule Alert
-------------------------------------------------------------------------------

1 04/13/2006 15:01:11 Local Login 0 LoginAllowed
Client IP Addr: 192.168.1.47

2 04/13/2006 14:59:09 Outbound 4 RulesDropNETBIOS Dropping NETBIOS Traffic
IP Packet Header:
Src Addr : 192.168.1.46 Dest Addr: 216.23.168.116
UDP Packet Header:
Src Port: 137 Dest Port: 137

3 04/13/2006 14:59:08 Outbound 4 RulesDropNETBIOS Dropping NETBIOS Traffic
IP Packet Header:
Src Addr : 192.168.1.46 Dest Addr: 216.23.168.116
UDP Packet Header:
Src Port: 137 Dest Port: 137

4 04/13/2006 14:59:06 Outbound 4 RulesDropNETBIOS Dropping NETBIOS Traffic
IP Packet Header:
Src Addr : 192.168.1.46 Dest Addr: 216.23.168.116
UDP Packet Header:
Src Port: 137 Dest Port: 137

5 04/13/2006 14:55:22 Inbound 4 RulesDropWANTCP TCP WAN Traffic to WAN IP
IP Packet Header:
Src Addr : 162.83.180.135 Dest Addr: 162.83.18.80
TCP Packet Header:
Src Port: 2201 Dest Port: 445
Flags: 02

6 04/13/2006 14:55:19 Inbound 4 RulesDropWANTCP TCP WAN Traffic to WAN IP
IP Packet Header:
Src Addr : 162.83.180.135 Dest Ad... Read more

A:Firewall logs?

The last part appears to be simply svchost.exe listening and sending out datagrams, nothing to worry about.
you can psot here if you want someone to give you a rundwn at wilderssecurity!

http://www.wilderssecurity.com/forumdisplay.php?f=31
 

Read other 1 answers
RELEVANCY SCORE 48.4

My firewall log is showing massive deny errors from my internal Windows network. Here's a snippet:

Aug 16 13:10:11 192.168.xxx.xxx FILTER: Remote access filter blocks: UDP bcast xl0 [192.168.xxx.xxx/5500]->[255.255.255.255/5500] l=28.

The port it's blocking is 5500 UDP is the protocol.... Anyone know what this port is, what it's broadcasting and how I can turn it off??

Thanks for any help..
Scully
 

A:Packet logs on firewall

What is the source IP address and the destination. It looks like a plain broadcast that looks for other PC's on your network. Looking at the log it looks like the source and destination are the same....loopback!!
 

Read other 3 answers
RELEVANCY SCORE 48.4

What is there to deal with this? I had virii and trojans, but all clear now.

Please help.

Erika
29/09/2011 8:42:20 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:20 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:16 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:15 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:14 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:13 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:06 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:06 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:02 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:01 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:42:00 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:41:59 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:41:55 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.32.161 UDP
29/09/2011 8:41:55 PM Detected unexpected data in protocol 192.168.195.106:40078 77.67.... Read more

A:Personal Firewall Logs

Follow these instructions here (http://code.google.com/speed/public-dns/docs/using.html) to change your DNS settings

Read other 1 answers
RELEVANCY SCORE 48.4

hello everybody.
hope your day is going well.
 
i was just wondering if anybody knew how to read firewall logs.
i want to make sure i understand this essential part.
 
this is an importaint element that you should do.
 
thank you

A:How do you read firewall logs?

i was just wondering if anybody knew how to read firewall logs.
i want to make sure i understand this essential part.
Yes, this was part of 2 years of security training.
If you expect to learn it from 1 post, you are very mistaken.
 
I have fed you many articles, that you have most likely not fully read (or scanned) yet -
 
Start with Make of Computer / Model of Operating System ? (XP) / Make of Router ? / Firewall program (free or paid version) ? / Your other installed security programs / and Hosts file Version / and a few more specific items that are needed.
 
As this is most likely to do with your "Shadow Hacker", posting more and more questions will not help you.
Posting 1 or 2 replies to the other topics would be much better.
 
Also learn to read TCPview and Wireshark results I have left you, as they are more accurate.
 
As answered, "if you will not take any of the advice offered, then your best hope is Google -
 
 
Since your level of IT knowlege is limited (by the series of posts you have made) you will not understand.
 
Very basic from 2001 from Z Net : Note that things have changed a lot since then.
 
One "simple current Google post"..from How to read Firewall Logs - About 5,710,000 results (0.21 seconds)
From IT World - July 20, 2013, 1:55 PM — Firewall logs always contain far too much data for you to look into. With the likelihood that you're collecting millions -- if not tens o... Read more

Read other 8 answers
RELEVANCY SCORE 47.6

I have read that I need to be checking firewall logs every day (ZDNet suggested this), and I know where to find the info. What I do not understand is how to interpret what I see. Is there a place to post here to have someone look at it, or can someone recommend other web sites that might be able to help? I have some concerns since I am seeing a lot of dropped packets.

Same question re event viewer. I see 'warnings' and dhcp and 1,000 events, but I don't know what that means, or whether I should be concerned, or take action in some way. Again, is that info something that can be looked at here, or where do I learn more about how to interpet the data?

Any suggestions/recommendations would be greatly appreciated.

A:Event Viewer and Firewall Logs

I have read that I need to be checking firewall logs every day (ZDNet suggested this),Hi Anonix -Unless you are having problems I see no reason to do this. Your Antivirus will keep a check on any problems usually.http://www.malwarebytes.org/ - or - http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREEIf you think you have problems then run Malwarebytes or SUPERAntiSpyware programs.(Both free)If there is a serious problem please post in the Malware removal area of this forum -Thank You -

Read other 4 answers
RELEVANCY SCORE 47.2

I just checked my Firewall logs for my server and I'm surprised to see that people are accessing a open port on my server (it's passworded with a .htaccess file).

Here's the logs:

server said:

#Version: 1.5
#Software: Microsoft Windows Firewall
#Time Format: Local
#Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path

2008-11-10 16:10:26 OPEN UDP 192.168.1.100 219.77.44.183 45813 20657 - - - - - - - - -
2008-11-10 16:10:26 OPEN UDP 192.168.1.100 173.17.17.229 45813 38590 - - - - - - - - -
2008-11-10 16:10:27 OPEN UDP 192.168.1.100 218.16.46.195 45813 24841 - - - - - - - - -
2008-11-10 16:10:27 OPEN UDP 192.168.1.100 62.57.70.127 45813 53838 - - - - - - - - -Click to expand...

That's a bit of the log, almost every entry is attempting to access 45813, which is a port for uTorrent web, which I use for transfering files from my home to my school (they've denied email and everything so this is my last resort). These aren't my schools IP's, because the schools IP never changes.

I'm just wondering if I should be worried about these "attacks." They're happening very often, almost 1 kb every 10 seconds. While that's small, it's occurring pretty often.

Also, my router logs say that I have a "SYN Flood Attack Detect." I'm not sure if that makes a difference.

Thanks for your support.
 

A:Server 2003 Firewall logs insane?

Read other 15 answers
RELEVANCY SCORE 47.2

Hello everyone - I installed the Norton Personal Firewall and have been keeping an eye on the logs, there is a strange occurance that I can't figure out - during a day (like today) I will have port scans from different IP #'s 24.188.117.119,3383 172.129.113.105,3383 200.77.68.40,3383 but see how the port numbers on the end are the same? Can anyone tell me if this is significant and/or what this means.

Thanks
 

A:Repeating port numbers in firewall logs

Read other 12 answers
RELEVANCY SCORE 46.4

When online, all program (browser and non-browser) execution becomes intermittently and exceptionally slow. On review of pfirewall.log, I see a high volume of outbound IPs, even if no browser is running.
 
This state occurs frequently but comes and goes. Just became noticeable within the past 2 weeks or so. 
 
Have scanned with MalwareBytes with no detections and have Avira running at all times. Windows XP, SP3.
 
Would greatly appreciate any suggestions or help.
 
 
Mike
 

A:slow running programs and mystery outbound IPs in firewall logs

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.... Read more

Read other 23 answers
RELEVANCY SCORE 45.6

Hey guys my computers busted again (and for the third time I call for help from my trusty laptop...it never seems to die whenever my desktop is in need...she's like a good neighbour...)

Sorry I digress! Few days ago my ISP disconnected my internet because they found an IRC bot infecting their network. I ran my antivirus and (gasp) it found system32/virut virus, among a plethora of other files. I'm not sure how bad this virus is, or if indeed anything can be salvaged. I let the antivirus remove what it could, and rebooted my PC.

From that point on I can't log back on. I see the blue screen, enter my password for my account, and it says loading settings, only to save settings and log off a few seconds later.

info-
NO, I cannot log in with other accounts, or administrator
NO, I cannot log in safe mode, or safe mode with command prompt
YES, I still have my operating system cd and YES I did an XP repair but it did not work (same thing, stuck at welcome/account screen grr)

Now I've perused the web and others have experienced similar problems. I tried a fix that says "copy userinit.exe wsaupdater.exe" that had worked for others.

I receive the message "The system cannot find the file specified." I guess viruses, ****-ware and whatnot tampered with my userinit.exe as it doesn't seem to be on my comp. That or my antivurs removed it, because I could still log on before I had run the antivirus.

Any way to fix/restore the mess? Prefera... Read more

A:Solved: XP logs off and then immediately logs back out lol

Read other 6 answers
RELEVANCY SCORE 45.6

My initial problem was that the my documents folder was automatically coming up on startup. So, I looked this up and I found this (From Microsoft):

1.Start>Run>Regedit>ok

2.Now navigate to the following key:-
HKEY_ LOCAL_ MACHINE\SOFTWARE\Microsoft\Win*dows NT\CurrentVersion\Winlogon

3.Look down the list in the Right Hand pane,scroll down to the value Userinit This value should read: C:\WINDOWS\system32\userinit.e*xe, (The comma at the end must also be there)

4.If the value is different from that mentioned above then Right Click on the Userinit value and, from the drop down menu, select Modify. Type in the value C:\WINDOWS\system32\userinit.e*xe,in the Modify dialogue box click OK

5.Exit the Registry.Restart your computer.

So I did, however, now when I log in it automatically logs out.
Any thoughts?
 

A:Solved: Computer logs in then immediately logs out

I do not know ehere you found this article suggesting the solution, but I can assure you that if you have typed correctly what it says the article is wrong.
It NEVER suggested Win*dows, unless it is a spoof article
and it never suggested typing e*xe.

Try F8 Last Known Good.
If no success try F8 Safe Mode.
If that does not work do you have the XP CD, without it, you now have a problem.

Is this the relevant part of the article you followed
To resolve this issue, follow these steps:

Back up the registry keys that you plan to edit before you modify the registry. For more information about how to back up the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 How to back up, edit, and restore the registry in Windows XP and Windows Server 2003
Check the Userinit and PersistBrowsers registry entries to make sure that they contain the correct values. To check the Userinit and PersistBrowsers registry entries, follow these steps:
Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
In the right pane, right-click Userinit, and then click Modify.
In the Edit String dialog box, type Windows installation drive letter:\WINDOWS\system32\userinit.exe under Value data, and then click OK.
Locate and then click the following registry subkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVe... Read more

Read other 3 answers
RELEVANCY SCORE 44

i have tried to fix my computer but i dont have too much experience with stuff like formatting stuff so a detailed explanation would help.

THE PROBLEM: my avg showed that 'userinit.exe' was a virus and i tried to move it to the vault but it didnt work. after a few days of getting this virus alert and waking up to like 50 internet explorers saying that i should download their internet explorer, i got annoyed and went on task manager, i found that the programme 'userinit.exe' was in there so i did end process. the next day when i woke up, my computer was unresponsive and so i restarted it. when it tries to log me on, it shows the background, i hear the sound, couple of seconds later, it logs me out...help someone.

I would prefer not to do anything that requires money...I have an official windows XP service pack 2 disk. Also I would prefer not to reformat my computer and leave that as a last resort option if there is nothing else I can do.

Someone help.

Thanks.

A:[SOLVED] need help, computer logs me in but then logs me out.

DO THE FOLLOWING:

1. Insert the original Windows XP CD (Windows XP with Service Pack 2 is preferred, but not required) and reboot the computer. You may need to configure your computer to boot from the CD-ROM drive.
2. When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
3. Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
4. Type the Administrator password and press ENTER.
5. Type the following commands:

D: [press ENTER]
CD I386 [press ENTER]
EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32 [press ENTER]

Note: there is a space between EX_ and C:

NOTE: If your CD/DVD drive has a different letter assigned to it, enter "X:" instead, where X is the appropriate drive letter.

The text "1 file(s) copied" should now appear, in which case all went well.

Remove the Windows XP CD, type "EXIT" and press ENTER to restart your computer. You should now be able to log on as normally.

paraphrased from this thread: http://forums.cnet.com/5208-6142_102...rum-w;forums06

Read other 3 answers
RELEVANCY SCORE 43.6

Quick thank you for listing info concerning the clearance of the ARP Cache. Had been unable to get help from local internet provider regarding this. Thanks!!
 

Read other answers
RELEVANCY SCORE 43.6

I recently bought a hard drive from my friend that has lots of songs on it. He gave me the driver as well and I want to use it as a slave drive. When I try to install the driver, it forces me to clear the hard drive but I want to keep the songs on it. Is there any way to install this new hard drive without clearing it?

OS: Windows 98 SE
HD: Seagate Barracuda 7200.7
120 Gbytes
Model: ST3120026A
 

A:Solved: Installing HD w/o clearing it

Read other 11 answers
RELEVANCY SCORE 43.6

My Computer seems to clear the Run history i.e. every time I go to the Run menu it's memory is blank, as far as it is concerned I've never used it before. How do I stop this,i.e. how do i get it to remember what I've run before?
 

A:Solved: Clearing run history

Check out this article:
http://windowsxp.mvps.org/runmru.htm
 

Read other 2 answers
RELEVANCY SCORE 43.6

when i go to internet options, and then choose to delete history, it says its deleted, but how come its still there, anyone help
 

A:Solved: clearing history

Assuming you are using IE, the standard options will never delete all the information because it is retained in index.dat files and, possibly, in things called User Assist files.

You can find out about index.dat files here; http://www.acesoft.net/delete_index.dat_files.htm If you scroll to the foot of the page that link leads to, you can d/l a free viewer called @Winspy, which will show you what is being stored.

You do not need to buy the commercial program advertised because various free ones claim to clear these files, including CCleaner and MRU Blaster. I think they both clean User Assist files as well, and you can find out more about them here; http://www.utdallas.edu/~jeremy.bryan.smith/ Click on 'Articles' and then on 'Explorer Spy'.

The author of this page also provides a viewer to check for the prescence of User Assist files.
 

Read other 1 answers
RELEVANCY SCORE 43.6

I've tried everything I can think of - clearing all temp files, using ATF Cleaner like I saw in another thread - yet there are still several URLs in the history that won't go away. Is there a way to fix this? Been thinking of changing browsers, but I would like to fix this problem first. Any help is appriciated!

A:[SOLVED] IE6 not clearing history

Quote:





Originally Posted by Quidam


I've tried everything I can think of - clearing all temp files, using ATF Cleaner like I saw in another thread - yet there are still several URLs in the history that won't go away. Is there a way to fix this? Been thinking of changing browsers, but I would like to fix this problem first. Any help is appriciated!





The standard way is to go to Tools in IE, then select Internet Options and delete cookies, delete files, and clear history.

If you have some in your dropdown in IE after that or even want to just delete certain ones, then you can delete them singly, by going through the alphabet and deleting the ones you want to get rid of.

You do this by putting the letter "A" in the brower window. When those items under letter "A" drop down, then put the cursor on each and hit the delete button and they will go away for good. YOu have to do each one this way clear through the alphabet, but it doesn't take as long as you might think.

Hope this is what you were asking. Post back with questions/concerns.

Read other 13 answers
RELEVANCY SCORE 43.6

I get this problem reported every time I tried to repair the wireless network connection [see attached]

Does anyone know what causes this problem and can suggest a solution.

Looking forward to an early response.

A:[SOLVED] Clearing ARP Cache

Moderator - what can I do to generate traction on this thread

Read other 3 answers
RELEVANCY SCORE 43.6

How do you clear history with SBC DSL? On internet explorer i would just go to internet options and clear it there but when i do that now nothing happens. What should i do?
 

A:Solved: clearing history

Read other 6 answers
RELEVANCY SCORE 43.6

Greetings,

I have a LAN of four computers running on a Netgear 624 - 1 wired Vista Premium, 1 wired XP Pro SP2, 1 wireless XP Pro SP2 and 1 wireless XP MC SP2. Everything had worked perfectly for months, but now I'm having a problem with failure "clearing netbt" on my wireless XP MC SP2. That is also the same time I can't access this particular computer from the LAN. I have not changed any settings on any of the computers and I've tried everything I could find on the net so far:
reset tcp\ip; reset winsock; clear tcp/ip stack; run winsockxpfix; make sure netbios helper is on; uninstall network adapter and reboot; disable tcp\ip and try to repair; run registry repair; run stinger; run spybot; and a bunch of other stuff that I can't remember right now.

I can now discount a malware infection because my High Jack This log posted in the security forum is clean. Not sure if I have a registry problem, a missing .dll or what. I'm stumped and need help, please.

A few days ago, but after the problems started, I lost auto windows update functionality and had to re-register my genuine OS. Don't know if that's a clue, but it only happened on this particular PC. After that I even lost the net everytime I restarted until I reinstalled the wireless NIC. Now I consistently have the net, but no network access. It used to map without access, but doesn't even show anymore.

I also read another possible fix is that the registry setting HKLM\SYS... Read more

A:Solved: Help with clearing NetBT

Read other 8 answers
RELEVANCY SCORE 43.6

I think I have the lop spyware, and perhaps some others, that are affecting my computer's performance. Yesterday, Internet Explorer windows starting opening on their own taking me to unwanted sites. My Trend Micro software never picked anything up, but a scan with spy sweeper found and quarantined Lop spyware. The problem is, the malware still seems to be operating.

Any help would be greatly appreciated. I've included a HJT log below. Many thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:03:51 PM, on 1/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\WINDOWS... Read more

A:Solved: Need help clearing virus

Read other 13 answers
RELEVANCY SCORE 43.6

I have one Compaq computer with XP Pro and Zonealarm. When I boot up the computer I get two computers trying to communicate with each other on my taskbar. I right click and click on repair and get the following message,
"Windows could not finish repairing the problem because the following action could not be completed: Clearing the DNS Cache" My internet connection works fine. How can I clear the DNS Cache? The error message will not go away when I click on Cancel, either. Thanks for your help.
 

A:Solved: Clearing The DNS Cache

Read other 16 answers
RELEVANCY SCORE 43.2

I have a 17" Hp laptop that I am going to donate to a school library
and before I do this I would like to remove all my personal files.

It has W7 SP1 loaded with all current updates so what would be the best way
to do this.

Thanks
 

A:Solved: Clearing computer files

Read other 14 answers
RELEVANCY SCORE 43.2

Hello,

Would someone kindly point me to the location of the folder that contains url's visited, so that I may delete them. I don't want to use a proprietary temporary cleaner if possible. Or should I leave them for the system to clean in its own time?

OS Win2K
450 Memory

Thank you,

Penny.
 

A:[Solved] Clearing URL's and Temporary Folders

Penny, Here is the instructions to clear your temporary internet files (in Green), Cookies (in Blue) and the history (in Red)-- where you have been. The bold faced items should be done in the begining, no matter what task you need to complete.
1. Click on the start button.
2. Go to settings.
3. Go to control panel.
4. Double click on internet options.
5. Click on delete files button.
6. Check delete all offline content.
7. Click ok.
8. Click on the settings button.
9. Choose every visit to the page.
10. Click on the view files button.
11. Click the edit menu.
12. Click select all.
13. Press delete on your keyboard.
14. Close the window.
15. Click ok.
16. Click on the clear history button.
17. Click ok.
18. Click ok.

I personally do all items in order to optimize(??) your system. Good Luck

Andrew
 

Read other 3 answers
RELEVANCY SCORE 43.2

How do I do this? I am using Firefox 3.0.1
 

A:Solved: clearing address box in firefox

Read other 11 answers
RELEVANCY SCORE 43.2

Hi I'm just new to this forum and I wanted to ask something about my network problem.

Problem is whenever I try to repair my internet connection I always have this "the following action cannot be completed clearing netbt please contact the person who manages your network" although my internet is working fine. Also the network speed is only showing 10mbps, before it was 100mbps. Any ideas? Thanks in advance. BTW I'm using windows XP sp2 64bit
 

A:Solved: Clearing NetBT problem

Read other 14 answers
RELEVANCY SCORE 43.2

Hi all i am currently using faststone image viewer and do like it.
I have a problem though as i have got a great pic of my granddaughter and want to put it on canvas buy she has scratched her forehead and it stands out a mile on the pic and would like to remove this from the pic.
I have looked through faststone and can't find a facility to do this.
Can anyone recommend a free software tool that could possibly help me .
I would be really grateful as the pic is going to be for my wifes birthday from her daughter.

Thanks very much
Gary
 

A:Solved: clearing imperfections on pics

Read other 16 answers
RELEVANCY SCORE 43.2

I need some help, in wiping out my hard drive. I am sure that I have gotten a virus from somewhere, although Norton or Trendmicro did not detect one. I have re-installed my windows application, however I still have tons of files on there that are ones that I have made myself. For example, when I do a search for a file I created in Microsoft Excel, it is still there, eventhough I just reinstalled that program. Could someone please help me in wiping off my hard drive so I can start from scratch.

Thank you.
 

A:Solved: Clearing hard drive

Uninstalling a program is not going to delete the files that you created with the program.

If you want to do a clean install of Windows, follow one of these guides.
Windows XP Home install guide
Windows XP Pro install guide
Windows 2000 install guide

If you feel there is something wrong with your system you may want to post a HiJackThis log before reinstalling. Maybe you have some spyware on your computer. You can download it from here.
http://www.spywareinfo.com/~merijn/downloads.html
 

Read other 2 answers
RELEVANCY SCORE 43.2

hi. i would like to know what to leave in startup to be safe. i would like to clear some to let the pc run quicker. i cleared a couple restarted and got a message saying it's started in safe or something and asked me to undo changes i did. i'm running xp with 640 sdram.
pops1
 

A:[Solved] clearing startup to run faster?.

Hi pops1

This is a list of possible startup items - and whether they are necessary or not - check yours against the list and decide which ones you can untick :-

http://www.pacs-portal.co.uk/startup_pages/startup_full.htm
steam
 

Read other 3 answers
RELEVANCY SCORE 43.2

the problem is -i want to clear some of the space which is covering a picture i put as a screen saver-i don't want to clear all th eicons as it becomes inconvinient to get them back again.i am not able to drag the icons and put them to another space .
the computer i am using is not mine and i am quite ignorant about the computer matters?
anyone can help?
thanks.
 

A:[SOLVED] clearing space on the screen

Read other 6 answers
RELEVANCY SCORE 43.2

My next door neighbor brought over his gateway 2000 and wants me to fix it. Figured out right away it was a bad monitor. Next I found out that even though the post screen detect the keyboard and mouse they don't work. I tried to get into bois but it is password protected. Is there a way to remove or reset the password?
 

A:[SOLVED] Clearing bios password?

Read other 12 answers
RELEVANCY SCORE 43.2

Hi
When I first installed XP professional on this computer it would boot to Desktop.
Foolishly I played around (abortively) with networking with other computers and thereafter the boot halts at a dialogue asking for password, clicking <OK> (without entering any of the requested information) moves it along to the desktop.
I would like to return to the original configuration but am unsure how to do it.
The <Network Connections> screen shows 3 entries
1. 1394 connection 3
2.Local Area Connection 3
3.Wireless Network Connection
From time to time I get a message bottom left of desktop "Information. A jack is unplugged" and when I have used the fault finder which comes up when IE does not connect I am offered a choice between MSHOME and NETGEAR (my wireless connection).
Can I return to the original setup, and if so How?
regards
phil
 

A:Solved: Clearing Network Connections

Read other 7 answers
RELEVANCY SCORE 43.2

Win XP Home Edition
How do I clear the Start up box in msconfig ?
 

A:[SOLVED] Clearing the Start up box in msconfig

Read other 9 answers
RELEVANCY SCORE 43.2

Hi.... I am new to the forum so go easy on me! I purchased a Brand New Compaq computer with Vista Basic Installed a few years back. I wanted to clear my hard drive and start fresh but I do not have a Vista cd. It did not come with the computer. In order to wipe my hd and start fresh, do I need to purchase Vista full version and boot from disc? Or could I purchase a Vista Upgrade? Whats the best (and least expensive) route to go?

Thanks!!

A:[SOLVED] Clearing Hard drive

and welcome to the Forum

The upgrade disc will require that a older version of windows be installed.

Read other 9 answers