Over 1 million tech questions and answers.

Definite Memory Problems; Unsure how to proceed

Q: Definite Memory Problems; Unsure how to proceed

Hello Everyone. Been awhile since I've been here. Been able to solve most of the problems I've encountered on my own since my first post in the hallowed halls of the techsupportguy forums.

Alas, I am in some dire need of help for a problem I've been having. I've checked other posts on here as well as other websites, but none of them seems to address my problem specifically, so forgive me if you have to repeat yourselves.

I've been having randoms BSoDs and hard hangs, most notably during gaming and while using browsers, but also less frequently whenever I'm just eating and chatting to a friend. I'll just be sitting there starting at my desktop and a Page Fault error will pop up and the system will lock. These problems have ranged from blue screens describing to page faults to what seems to be the monitor shutting off and going completely black. Can't even shut down the computer by going through alt-f4 or the start menu via macros, so it's not a monitor problem. NOTE: It also crashes in safe mode.

This doesn't happen at all on some days, but on others it seems as if it occurs 5-6 times in a row.

I started by doing a system restore and updating all of my drivers, but it hasn't helped. I thought that I might have some memory problems, so I went ahead and I ran windows memory diagnostic and it reported that there was a hardware problem with my memory. I have not run memtest86 yet, though.

Another notable thing is that whenever I ran the system utility checker to update my system specs for the website, it only detected that I have 2 gigabytes of RAM, but I actually have a total of 4 gigabytes in 2 cards.

I'm unsure of how I should go about dealing with this problem, especially since I'm currently in Eastern Europe for a year studying abroad. Any help or advice on whether its fixable or I need to shell out some cash for a new stick of RAM would be much appreciated.

Thank you for your time.

I've gone ahead and attached 2 of the minidump files from today as well.

RELEVANCY SCORE 200
Preferred Solution: Definite Memory Problems; Unsure how to proceed

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Definite Memory Problems; Unsure how to proceed

Read other 9 answers
RELEVANCY SCORE 69.6

I am helping an elderly family friend diagnose his computer problems.  He has fallen victim to a fake technical support scam by a company called "Adroit Rescue", and has paid their "fee" for what they claim is a year's worth of technical support.  I have his computer, and it is disconnected from the internet.
 
In looking through the machine, I see that the scam happened on August 7, 2016.  A text document was placed on the desktop, with the title "COMPUTER TECHNICIANS".  Inside, it lists the technician's supposed name and employee ID, the company name and phone number, and a customer ID number.
 
On the day the scam happened, he said received a popup on the screen which froze his computer, then received a phone call from Adroit.  He had no idea how they acquired his phone number.  He also cannot remember how the popup occurred - either by clicking an email link, Facebook link, Microsoft Edge browser ad, etc.  He said they spent an hour on the phone with him.  They did their fake security presentation on the computer screen, and "unlocked" his machine after taking his credit card information over the phone.
 
How do I go about determining exactly what they have done to his machine?
 
By searching the hard drive, I see the following happened on August 7th:
 
-  A folder for ADWCleaner was created.  Its logfile shows removal of the following:
   -  ask.com
   -  dotomi.com
&... Read more

Read other answers
RELEVANCY SCORE 69.6

Hello ALL
I have ESET security on my sons laptop since last April. It has been scanning at start up and doing what it is supposed to. Recently he started having some breaking up of sound.
The MS jingle at start up and sometimes songs he plays. I thought it prudent to do some scans just to make sure no malware has snuck in.

Updated and did a quick scan with MBAM. Nothing found

Did an ESET smart scan and it listed threats as ?4 infiltrations?.
It stated it could not clean automatically and to pick a manual action.It does not list "clean" as an option

Only actions listed are:

Delete
Or
No action taken

I am reluctant to simply delete theses without getting some outside advise.

Input form BC friends would be appreciated

This is what is listed as found by ESET:

C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\20\4ef244d4-49cf35e6 multiple threats No action

C:\Documents and Settings\NetworkService\Application Data\Sun\Java\Deployment\cache\6.0\7\124509c7-563d8dc7 a variant of Java/TrojanDownloader.Agent.NDJ trojan No action
Best Regards
Nawtheasta

A:ESET found something but unsure how to proceed.

Please download and run Temp File Cleaner and then do the following:Please download and run Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Read other 9 answers
RELEVANCY SCORE 69.6

I am helping an elderly family friend diagnose his computer problems.  He has fallen victim to a fake technical support scam by a company called "Adroit Rescue", and has paid their "fee" for what they claim is a year's worth of technical support.  I have his computer, and it is disconnected from the internet.
 
In looking through the machine, I see that the scam happened on August 7, 2016.  A text document was placed on the desktop, with the title "COMPUTER TECHNICIANS".  Inside, it lists the technician's supposed name and employee ID, the company name and phone number, and a customer ID number.
 
On the day the scam happened, he said received a popup on the screen which froze his computer, then received a phone call from Adroit.  He had no idea how they acquired his phone number.  He also cannot remember how the popup occurred - either by clicking an email link, Facebook link, Microsoft Edge browser ad, etc.  He said they spent an hour on the phone with him.  They did their fake security presentation on the computer screen, and "unlocked" his machine after taking his credit card information over the phone.
 
How do I go about determining exactly what they have done to his machine?
 
By searching the hard drive, I see the following happened on August 7th:
 
-  A folder for ADWCleaner was created.  Its logfile shows removal of the following:
   -  ask.com
   -  dotomi.com
&... Read more

A:Possible ransomware infection - unsure how to proceed

A little more info:  This is a Dell Windows 10 machine - my apologies for not mentioning that in the previous post.  I had previously helped him with the Dell update software a few days earlier, and I remember installing Malwarebytes to scan for any malware as a precaution while looking at his setup.
 
Other things I've discovered:
 
-  It appears that in the process of the scam, the scammer uninstalled Malwarebytes, and downloaded a program called "Support-LogMeInRescue" on August 7th at 2:20 PM.  There is a file named "rescue.info" in the root C: directory.  I opened it with Notepad, but it only showed machine / computer code - no legible text.  The date and time of the rescue.info file is August 7th at 2:21 PM.
 
-  The scammers created a manual restore point labeled "tech123" on August 7th at 2:50 PM (the day of the scam).  There is a previous Windows update restore point from earlier that day - 12:38 PM - labelled as "Critical Update".  They deleted all other restore points.
 
-  They then used ADWcleaner as mentioned previously.  The date is August 7th at 4:40 PM.
 
-  The C:\ Program Files\ Common Files\ directory has a last-modified date of August 7th at 4:21 PM, but I cannot see any files inside which also contain that date.
 
-  I also searched for the date 8/7/2016 in both File Explorer and Event Viewer, and found some interesting things:
 
   -  Prefe... Read more

Read other answers
RELEVANCY SCORE 68.8

We use Desktop Central to manage our windows updates. I've come across a new error that I have not seen all year. They are telling me it's a Microsoft error and they have no information on it. 
I have a couple of Windows 7 machines that have the following error on multiple updates.
An attempt was made to create more links on a file than the file system supports.

Of the machines having this issue, they're not all the same KB. Using one of the machines as example, it's having this issue with 3 updates.
2019-10 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4519976)

2019-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4516033)

2019-08 Security Only Quality Update for Windows 7 for x64-based Systems (KB4512486)


Seems like the standard Windows Updates fix's aren't working. Software distribution folder rename, fixit tools, etc. I'm not see this on any of our Windows 10 machines. 
Any idea how to go about resolving this? Reimaging is way at the bottom of the list due to these machines being at remote sites. 

Read other answers
RELEVANCY SCORE 68.8

Hi everyone! First, here are my laptop and system specs: OS Version: Microsoft Windows 7 Home Basic, Service Pack 1, 64 bit Processor: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz, Intel64 Family 6 Model 42 Stepping 7 Processor Count: 4 RAM: 4039 Mb Graphics Card: Mobile Intel(R) HD Graphics, 1795 Mb Hard Drives: C: Total - 431937 MB, Free - 358762 MB; D: Total - 29690 MB, Free - 26465 MB; Motherboard: LENOVO, Base Board Product Name Antivirus: Microsoft Security Essentials, Updated and Enabled

So after my (now uninstalled and expired McAfee) antivirus program detected some threats, I deleted them but got worried about my laptop being infected. After doing some research, I ran SFC, which showed I had some corrupt files that couldn’t be repaired (attached if it will help!)

I didn't know what to do with them, so I backed up my files to an external hard drive, uninstalled McAfee and installed Microsoft Security Essentials (ran it on Full Scan, too), ran both CCleaner and MalwareBytes, and finally, ran CHKDSK in Safe Mode for both the C: drive and the D: drive, hoping these might repair the problems. Now, all this went just fine, reporting no threats, etc., but when I ran SFC again it still shows the same corrupt files, and now I don't know what to do to protect my computer and resume using it more normally

I read that you can fix these corrupted files with a repair installation/inplace upgrade (running setup.exe from the Windows 7 DVD and selecting ‘upgrade’) or run... Read more

A:Solved: Unsure how to proceed with SFC's corrupted files

Read other 13 answers
RELEVANCY SCORE 68.8

Hi again I just found the cause of my Blue Screen of Death but i'm not sure what this file is for or if it is safe to get rid of it, the file that causes my daily blue screen of death is call cymon.sys some sort of driver from the company CypherTec Inc.. Any help on this matter would be awesome i'm tired of getting a blue screen in the middle of playing games and what not. Just let me know what info you need to help me figure this out. Thank you

A:Found the cause of my blue screen but unsure on how to proceed

Download BlueScreenView:
http://www.nirsoft.net/utils/blue_screen_view.html
unzip downloaded file and double click on BlueScreenView.exe to run the program.
when scanning is done, go to EDIT - Select All
Go to FILE - SAVE Selected Items, and save the report as BSOD.txt
Open BSOD.txt in Notepad, copy all of the content, and paste it into your next reply

Read other 7 answers
RELEVANCY SCORE 56.4

Hello all, new guy here. Have this PC that can't access windows update site, and gets redirected in both firefox and IE. Ran multiple scans of MalwareBytes and Super both in Reg and Safe mode, removing multiple trojans along the way. Also turned off system restore because files were infected within it. Did all of this, and am still getting same problems. Then ran combofix and here are results:

Really appreciate anyone who can help

**My apologies, I had posted a log of CF not knowing not to. So, to further my description of problems, I am still unable to access windows update or browse the internet correctly. Heres a list of what was infected / removed by both SAS and MB:
1 trojan.agent/gen-fakealert[exe]
1 trojan.windantispyware/winantivirus2006
1 trojan.winfixer
-ALL 3 OF WHICH WERE IN SYSTEM RESTORE FOLDERS
2 trojan.fraudpack
1 trojan.witkinat
1 trojan backdoor
4 rogue all suite

Read other answers
RELEVANCY SCORE 53.2

Hi Guys.

I'm trying to fix my girlfriends computer, its a bit of a nightmare. The other day she clicked something which may have been just her ad aware saying "update me" OR may have been some popup designed to look official, either way fast forward a few hours and I notice a thing on her screen saying "AntiMalware Doctor" and saying its found all these viruses. Oh dear, says I, recognising it as one of those 'conware' things that tells you you have lots of viruses when you don't, however on doing a full scan it turns out that her computer does infact have other (different) viruses :s

Currently, when it detects it has internet access, it seems to download another version of the virus, (they're all called things like 531.exe or 7251.exe etc, I can tell because her firewall catches them asking for access) and then says something like "windows has discovered a critical error and must reastart, your computer will restart in one minute".

The only way i've been able to run the scans detailed in the "Everyone MUST read this first" thread is by downloading them using MY laptop, and then transferring to hers using a USB stick and then running her computer in safe mode and then running the scans.

So, here are the scans..

=========HIJACK THIS LOGFILE==============

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:44:30, on 16/08/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer... Read more

A:Serious problems on windows vista - definite virus / trojan / backdoor :s

Read other 6 answers
RELEVANCY SCORE 52

i am thinking of upgrading my memory by getting 1gb of ram but unsure of which one to get i have seen a pc4200 ddr2 and was wondering would this work on my pc it has windows xp sp2 thanks
 

A:memory unsure

Read other 11 answers
RELEVANCY SCORE 51.6

Hi,

i need to upgrade my memory. I know that i already have SDRAM installed. Is this all you need to know when purchasing more?

In case not, I have copied and pasted the details of my computer, hoping that someone can advise me about what kind of memory i need to go out and buy.

Thanks in advance.

cubbycuddly

System Alphacode Search

Alpha Code U117 System Name Studio Writer
Description U117 STUDIO WRITER

Processor Athlon 800 Memory 128MB SDRAM
Cache 0K Graphics INTEL 4XAGP GRAPHICS
Mainboard MS-6340 KM Case MICRO ATX TOWER
I/O PCI IDE (ENHANCED) PSU Delta DPS-145PB-111 A Rev00
FDD A 1.44MB FDD B NONE
HDD 1 30GB HDD 2 NONE
Comms 56K Modem-CNR

Restore Pack Restore Pack 1: V1.4 ME Extras CD

Addition Tiny Extras CD V1.5 Addition DVD Rom 6x
Addition CDRW Addition Onboard Wavetable 32
comments
 

A:memory needed but unsure

This should be what you need

SDRAM, PC133 • CL=2 • Unbuffered • Non-parity • 7.5ns • 3.3V

You can check using www.crucial.com configurator, although there are about 5 different motherboards with that number they looked like they all used the above, the last configuration info on the above is missing as that changes with the size of the chip you but
 

Read other 2 answers
RELEVANCY SCORE 51.6

A Friend's computer is a mess, running unbearably slow, want to replace her 128 memory with at least 256, but not sure I am buying correct module. Her processor is a 80526, 733,256, 133, Fiber Channel 80(off her parts list). They have a Dual in line memory module, 128, 100M,16x64 4K, 168 in the computer now. At dell, it is selling a replacement for her Dimension L seris at SDRAM PC 133 168 Pin. Is this what I should be buying, as it looks like the module in the computer now is running at 100 M not 133m. Any help would be appreciated!
 

A:CPU unsure, need to update memory, Help!

how old is this computer...tell me and ill help you
 

Read other 6 answers
RELEVANCY SCORE 51.6

Hello,

My computer arrived on April 30th 2011, so it's new and I'm getting the BSOD.

I think it is bad memory, but Cyberpower wants me to be sure. They'll take the computer in for service, but that means I'm out a PC for a long time.

I have attached the latest dump file and am curious if anyone can diagnose it.


I have Windows 7 Home Premium.

AMD Dragon...something

AMD Phenom II
x6 109T Processor
3.20 GHZ

8 Gig of Ram
64 Bit Operating System

AMD Radeon 6800 Series Video Card

I have run Memtest86 on each memory stick individually. All of them in all slots report an error 31% into the test.

Thanks for your help!

A:BSOD unsure if it's memory

  
Quote: Originally Posted by Rmarsden


Hello,

My computer arrived on April 30th 2011, so it's new and I'm getting the BSOD.

I think it is bad memory, but Cyberpower wants me to be sure. They'll take the computer in for service, but that means I'm out a PC for a long time.

I have attached the latest dump file and am curious if anyone can diagnose it.
I have Windows 7 Home Premium.

AMD Dragon...something

AMD Phenom II
x6 109T Processor
3.20 GHZ

8 Gig of Ram
64 Bit Operating System

AMD Radeon 6800 Series Video Card

I have run Memtest86 on each memory stick individually. All of them in all slots report an error 31% into the test.

Thanks for your help!


Indeed was memory corruption but I suspect from a driver.

What error and on what pass did memtest error?

Also please run driver verifier to find the problem driver






Quote:
I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

In Windows 7 you can make a Startup Repair disk by going to Start....All Programs...Maintenance...Create a System Repair Disc - with Windows Vista you'll have to use your installation disk or the "Repair your computer" option at the top of the Safe Mode menu .

Then, here's the procedure:
- Go to Start and type in "verifi... Read more

Read other 9 answers
RELEVANCY SCORE 50.4

Heyo! Hopefully this gets a view and some answers sometime soon, as I've been dealing with this issue for a few weeks now with no avail. My computer's task manager, when prompted to do so, displays multiple .exes under the same name -- something I understand is relatively normal. One of them, however, quickly begins to consume rapid amounts of memory after every restart, and it often results in severe issues completing even the most mundane of tasks. 
(Around ten minutes after a restart.)
 
I'm not sure what's causing this, and attempting to google-fu myself an answer has only resulted in more confusion. Does anyone know what might be causing this, and how I might go about fixing it?

A:svchost memory leak issue. I'm unsure of as to why.

It's normal that one of those "SVCHOST" processes uses up to say 140 MBs of memory. In that regard, 160 MB is not that far "out of line". "Svchost" using A LOT OF memory (say > 140 MB) is a sign there's a problem with one of the Services in combination with some other software. And reports of those conflicts could/will show up in "Eventviewer".

Read other 5 answers
RELEVANCY SCORE 49.6

Hi there, I have some problems with my Lenovo G50-30 Lap.The Story from the beging: Lenovo G50-30 has the Upgrated Win 10 64 but after a problem with a Win 10 Update on 8 of May 2018 I had to go back to the Factory OS from Lenovo On Key Recovery back to Win 8.1. with Bing. I install all the Win 8.1 Updates but still the laptop working to slow..!After a reboot I get Blue Screen with a message "Driver Power State Failure".  This message came after the Lap was close withe power on and went to Sleep Mode for hours! Then with a hard shutdown from the power button and power on again, wont boot to Windows and get the message with Driver Power State Failure.When I manage one time to boot to Windows, I change the option on the Power Option Menu, For Managing The Power Sleep, Hibenat and other option. The system also was very slow! Reboot and doing the same. Driver Power State Failure! Reboot again but the same problem the Lenovo Logo but wont boot to Windows and the same message and try to reboot again.I can not also go to Safe Mode Enviroment cause no key either F8 or F4 was working (other key working to go Safe Mode?) .I try also without batery to plug out the power cable. Nothing! Still can't able to boot to Windows Enviroment. of Safe Mode I open also the back cover, unpluged the HDD Drive and the memory and plug in after a minutes and without battery on. Nothing!The same blue screen and message again. The Recovery Option From Nano Lenovo Menu wo... Read more

A:Lenovo G50-30 Problems - Wont Proceed from USB Bot to Recovery or Format Stuck After Win Logo

It sounds like the HDD may be having trouble reading the boot sector and might need to be replaced. Have you tried using the "novo" button to enter BIOS and see if you have a HDD diagnostic you can use?  If you can enter BIOS, change out the boot order, try your USB and CD/DVD.  If it boots from USB or CD successfully then I would suspect a HDD issue, one that may require replacing the HDD to cure.CB

Read other 2 answers
RELEVANCY SCORE 49.2

Hi, been having this for a while now, I believe it is something to do with the memory, as it tends to do this when the computer is trying to do to much at once, however it does not happen when the graphics card is removed (original assumption) so unsure if that is part of the issue.

The debug file is attached, if any extra information is required please say so.

A:BSOD, at random times, suspected memory issue but unsure

Code:
fffff880`07367358 fffff880`04088accUnable to load image aswSnx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSnx.sys
*** ERROR: Module load completed but symbols could not be loaded for aswSnx.sys
aswSnx+0x29acc
What is aswsnx.sys ? | System Explorer

Hi NodrogJRB.

Uninstall Avast using Avast Uninstall Utility. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Let us know for any further BSOD.

Read other 5 answers
RELEVANCY SCORE 46.8

I was seeing the vimax ad everywhere Being re-directed in my searchunable to download anything to fix (adaware, etc.)I ran combofix and HJT.My AVG has caught a couple of things today.Here is my logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 12:52:07 AM, on 8/7/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTsvcCDA.EXEC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\Program Files\Analog Devices\Core\smax4pnp.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\WINDOWS\system32\CTHELPER.EXEC:\WINDOWS\system32\hphmon03.exeC:\WINDOWS\system32&#... Read more

A:HJT Log - unsure of the many problems.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 46.4

the computer in question has been having a glut of problems, but they seem fairly random. I will list in order of severity. unfortunately the computer is not mine, and the documentation is nowhere to be found. I can however say it's running windows XP, has 512mb of ram and a CPU somewhere in the range of 2g

1) the computer does most things *extremely* slowly. it often takes it a minute or more to open the internet, or a random folder on the desktop. It does however run higher end games (ut2004 for instance) which puzzled me.

2) the CD drives have been working less and less. the D drive just doesn't work at all, and the E drive tends to crash to "not responding" soon after being opened. Even simple tasks like copying pictures from a CD takes 5 or more tries, and thanks to problem 1, often half an hour or more.

3) the left hand side of the screen doesn't hold its picture, it wobbles, or "vibrates"

other information: a good deal of time and effort has gone in to virus and spyware scans, and they have turned up nothing. The CPU usage is really low, never above 50% even during really bad lag spikes. Page file usage (i have no clue what this is) is always above 90%. sorry the information is spotty, but I hope it's enough to bear fruitful suggestions
 

A:many problems, unsure if they are related.

Read other 9 answers
RELEVANCY SCORE 46.4

Hello guys, been a long time since I have had to come here for my own problems but I got a message that some unauthorized computer was trying to access my windows live account. So I loaded up hijackthis and found a lot of entries I'm unsure of. I have not noticed any major problems. AVG has notified me of a win32k.sys rootkit that it is unable to remove. I'm worried that my computer might have a keylogger or something so I changed all my security passwords from another terminal. Would someone be able to help me check this out please?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:51:53 AM, on 6/17/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\rundll32.exe
D:\Steam\Steam.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Windows\system\Cm106eye.exe
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\AVG\AVG10\avgtray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C... Read more

A:Many Problems unsure what to remove

DDS Log

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by Trevor at 8:30:52 on 2012-06-18
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.12286.6532 [GMT -6:00]
.
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
D:\AVG\AVG2012\avgrsa.exe
D:\AVG\AVG2012\avgcsrva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k Loca... Read more

Read other 1 answers
RELEVANCY SCORE 46.4

Hello!

I have been having several problems with my machine lately, the most concerning being how several applications tend to become sluggish and then non-responsive, forcing a restart to get anything to work again at all. If anyone could take a look at the HJT log I have attatched and give me any advice, I would be extremely grateful.

Thanks,

~Katie
 

Read other answers
RELEVANCY SCORE 46

Hi - I'm new to this forum and I understand enough about computers to be able to install new ram, power supply etc. but am not super proficient in the tech talk - know most the terms, not where to find them in the system/software.

OS: XP Professional,
Office XP (Office 10),
Dell Optiplex GX 260 Pent 4 2.4 Ghz 1.5 Gig ram 40 G HD

Problems:
Multiple program failures - even though software is still on hard drive, and shows on add/remove programs list in control panel - programs won't start, and WINDOWS INSTALLER comes up asking to put the CD Rom in - for most programs I don't have the CD as I got this computer used from someone and didn't get any software disks.

When rebooting - get a blue screen that has an error message saying one of the secondary hard drives needs to be checked for errors - it says I can abort scan if I want - just hit any key - but when I do this - it doesn't stop the scan or abort it as it should.

Can't run 'repair' on the Microsoft Office suite from add/remove programs panel - and it seems more programs keep failing.

I've checked and defragged the disks - and everything shows a status of OKAY - and I so have all my product keys from when I got the machine they were all written down and I've verified them using Belarc Advisor - the keys match what I had in my file - so the programs are still on my computer - its just not recognizing them for what ever reason.

Just before posting - I got this error - when I closed down a windows i... Read more

A:Unsure where I should post multiple problems

I need you to validate your Windows OS again please from here left pane

It is acceptable to borrow your exact OS CD from a pal to run sfc /scannow to make sure you have no corrupt or missing .dll files on your OS. Running the scan without inserting your OS is not successful as if there are any issues, Windows needs to copy missing or corrupt files from the OS CD.

Have you got backup for your data on this system? Let us know so we can help you further as it maybe necessary to repair or format your HD. To do that you will need to buy a genuine copy of Windows Professional OS as you say you have no CD. As you have the product key for your OS, when you contact Microsoft to obtain a CD, you would need to have that handy.

Make sure all your Windows updates are current too.

Post a reply with answers to the above thanks......

kind regards,

Read other 5 answers
RELEVANCY SCORE 46

First is blue screen crash and dump of physical memory. It happens anytime i encounter a video. Even if
it opens without prompting it as in scrolling facebook and having a video open;

This describes the info of blue screen

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 116
BCP1: FFFFFA8007F60010
BCP2: FFFFF880048A6E5C
BCP3: 0000000000000000
BCP4: 0000000000000002
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\082615-25038-01.dmp
C:\Users\Cheryl\AppData\Local\Temp\WER-102555-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

The other more recent problem is notification that my windows is not recognized as valid. This windows came with the computer I purchased from dell and it has not been changed.

Should I be posting these in separate forums and deal with each issue one at a time?
 

A:Two Problems on my computer. Unsure if related

neither seem like malware related so moved to Windows 7 forum
 

Read other 3 answers
RELEVANCY SCORE 46

I ran spybot scan and let the program ran its fix but it says some of the dectected items could not be fix. I proceeded to the quarantine to try "manually removing" them although im actually oblivious to what im doing, sorry. Below is copy paste hijackthis log, i have also attached the log file incase needed. thanks
 
 
 
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 11:26:35 AM, on 15-Mar-15
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
CHROME: 41.0.2272.89
FIREFOX: 36.0.1 (x86 en-US)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
C:\Users\melanie mok\Desktop\HijackThis.exe
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin... Read more

A:Unsure if my pc is completely cleared of problems

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, ... Read more

Read other 27 answers
RELEVANCY SCORE 46

So I got a virus, used alot malwarebyts superantispyware, avira, sophos and a dozen other. I put UAC to full and other suggestions that I got, Even had to SFC /SCANNOW a few times and still having some issues. Firstly I get this image when I boot. I get the "Please wait" and then "Welcome" screens then this pops up. I can not CTL+ALT+DEL out of it. If I try then only when I click the button or the x does the screen come up allowing me to run taskman.[/IMG]when I try to log off I get this screen for about a min. It doesnt seem that anything is actually running.[/IMG]Uploaded with ImageShack.usAlso My hibernate no longer works.I had TR/PATCHED.GEN infecting explorer.exe and winnint.exe and other but I thought I had cleared it. I need some help. Here is my hijack this log. Is there any app that can log all apps/files from power on until stopped? I would like to see all that starts and then when my desktop is available I could stop and analyze.oh and it says unknown windows but it is windows 7 starter on an acer aspire 1Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:24:13 PM, on 1/19/2011Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16700)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Launch Manager\LManager.exeC:\Program Files\Realtek\Audio\HDA... Read more

A:unsure virus but many problems and fixes

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 2 answers
RELEVANCY SCORE 45.2

I have a Dell D620 running Windows XP Professional service pack 3. I am sure I mistakenly allowed a download that I obviously shouldn't have that started this problem. I believe the first issue I began having was related to downloading Antispyware Soft. After following the advice offered through other posts, I thought I had this removed using HiJack this and Malwarebytes.Initially, after having run Malwarebytes and Hijack this, when windows was trying to load, I would get 2 errors, they said that Data Execution Prevention shut down Windows Logon UI and Userinit. None of my desktop icons would load, nor would the windows taskbar. I had to manually run explorer.exe from the task manager to get them to come up. This problem is no longer happening.The second problem I am having involves having browser problems. Google Chrome will not work at all. Internet explorer does work, but will not access some web pages, and if I do a search and try to access a page by selecting the link the search provided, I will be redirected to a page completely unrelated.Finally I decided to begin my own thread here on bleepingcomputer. I was able to easily got the dds logs you needed, but had problems when trying to get the GMER log. During one of the scans, I stepped away from the pc for a minute, when I returned, it was on a blue screen that said...."A problem has been detected and windows has been shut down to prevent damage to your computer. The problem seems to be caused by the followi... Read more

A:Malware/Virus! Unsure of cause, but numerous problems

Hi and welcome. My name is Extremeboy (or EB for short), and I will be helping you with your log. I apologize for the delay.If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a GMER log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or GMER log please refer to this page and in step #6 and Step #7 and Step #8 for further instructions on downloading and running DDS & GMER. If you have any problems when running the tools or unable to produce a report for any reason, just let me know in your next reply.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-GMER log-Description of any remaining problems you may still have.With Regards,Extremeboy

Read other 15 answers
RELEVANCY SCORE 45.2

Hi, I have been experiencing major slowdowns and have run all necessary programs and I have Smart Security ESET/NOD32, and used all anti-spyware programs recommended. I myself looking at the log from previous experiences see some things that may be spyware, please help in confirming and making my decision. Here is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:46:25 PM, on 10/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ARPWRMSG.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOW... Read more

A:Unsure of Main Problem, Am Positive that I have various Problems

Bump Please

Read other 1 answers
RELEVANCY SCORE 45.2

Currently I am using a Compaq SR1330NX which ran great when new 2 years ago but with all the spyware and junk on it I am having some problems. I get a lot of programs "not responding" when I close them. Of course, my pc has been slowing down and freezing up. I've gone through and deleted all files I could think about deleting and removing. I ran Adaware, Norton, and Spy Bot Search and Destroy and I have hijackthis which I ran a scan with. I had an old friend who would use this to help me out but I dont want to mess anything up so here is the log. Thank you for anyone who can help...but please give me a professional opinion and not an estimated guess. I also have errors when I start my computer like system couldnt start gzmrotate.exe...etc. Please help! Norton also pops up everyday saying tracking.marketscore....just to add to more of my problems.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:22:49 PM, on 1/28/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16574)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS&#... Read more

A:Unsure Computer Problems...i Have Logs And Done All Steps To Fix Myself!

Its been 3 or 4 days without a response...I was just letting yall know I was still waiting

Read other 4 answers
RELEVANCY SCORE 45.2

Hello everyone,

Haven't had issues like these in a while, and I knew this was the place to go to have them resolved. My computer is running very slow and Firefox will shut down at random. I have an icon that keeps popping up saying that updates are ready to be installed but every time I try to install them I receive an error message saying they cannot be installed. I'm fine with that but the icon keeps coming back. The primary issue is the slow running speed. If anyone can help guide me through the process of fixing it, I would appreciate it.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:21:36 PM, on 12/7/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\slserv.exe
c:\Program ... Read more

Read other answers
RELEVANCY SCORE 44.8

Hello,

I am running Windows XP Professional version 5.1 with service pack 3. I followed the awesome instructions for removing AV Security Suite and was able to do everything successfully. While I have Symantec for virus and recently added MalwareBytes and SpyBot, I was still not able to open Explorer until I mended the host file.

My computer is still running slow and I am wondering if this is some form of the AV lingering, still? I am attaching a log file from TrendMicro hijackthis but have no idea what belongs and what doesn't. Any help would be appreciated.

Do I need to spend the $50+ for the reimagepcrepair fix?

Thank you in advance for your assistance! This has been such a time-suck

A:Unsure if removed AV Security Suite - lingering problems

Not sure what you are feferring to...but the BC removal instructions for AV Security Suite can be found Here.Louis

Read other 4 answers
RELEVANCY SCORE 44.4

I don't know if I have a problem or not. Spy Bot scans always tell me there is a Right Media cookie being stored, but it doesn't (or can't?) delete it when I say "fix". I try to run virus scans with different engines from time to time, in case there is something one program doesn't catch. For the most part, it appears I don't have a virus, spyware, etc.....I mean since the last time one was found(except for this cookie thing), and I can't remember when that was. But my computer began to run slow and IE hung up alot...I thought it was just my pc bogging down from all torture I put it through. Something is nagging at me though and now I want to make sure there is no virus or malware, etc., or if there is, find help to get it cleaned up. No, I haven't been running a true AV lately....I expect to be chastised for that. I do try to go online and run free scans as regularly as I can. It seemed that every AV I installed made the slow up worse...and I couldn't figure out why that was. Spy Bot has been the most compatible with my system, so I kept it. Would someone please look at my logs and let me know what's happening? I would appreciate it alot. DDS.txt.DDS (Ver_11-03-05.01) - NTFSx86 Run by k at 21:15:26.90 on Sat 03/05/2011Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.152 [GMT -8:00]..============== Running Processes ===============.C:\WINDOWS\system32\svchost -k Dcom... Read more

A:Right Media cookie - SpyBot alerted me Unsure what problems it is causing.

Good evening. Your PC is suffering from a few issues:1) It's at least five and a half years old and so doesn't have the capabilities that i'm sure you'd like.2) The Windows installation is five and a half years old and unfortunately slows down over time due to installations/uninstallations and updates.Windows performance naturally degrades and the only solution to that is to reformat and reinstall it. I generally do this every six to eight months depending on how the PC is behaving, so your system at over five years old is well overdue a fresh installation.3) You by your own admission run an insecure machine - by that I mean insufficient security programs.With a lack of proper security you face the possibility that system files may have been patched, corrupted or replaced and Windows security settings lowered to make subsequent infection easier, all without anything trying to block these actions - it's PC open season on your machine. Given the large range of potential problems, it is next to impossible to guarantee to fix everything and so is not the best use of time when trying to resolve the computer's problems.~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~It seemed that every AV I installed made the slow up worse...and I couldn't figure out why that was.Any real-time monitoring programs, such as an anti-virus or firewall will require some of your PC's processor power and will therefore cause it to slow down s... Read more

Read other 3 answers
RELEVANCY SCORE 44.4

Ive been having this issue for about 6 months now, ive tried system restoring, running in safe mode, everything i can think of! This issue has been plagueing me on a daily basis, and its been frustrating... If you are able to help, i would greatly appreciate it!

Here is the attached error messege:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFFA8004F46B88
BCP3: 0000000000000000
BCP4: 00000000FFFA8000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Thank you for your time ^.^

A:Repeat BSOD, unsure how to read codes, and troubleshoot problems

Attached!

Read other 5 answers
RELEVANCY SCORE 44.4

My microphone, as of last night, as started producing a "buzzing" noise to its listeners. I can't hear it unless I go into recording devices and click "listen to this device". It's a constant buzz, as long as my mic is enabled (I do a lot of push-to-talk in video games). I've tried another headset with the same result. I updated my video card (GTX 960) with no change. Restarted the computer of course, as well. Just trying to see how to diagnose the exact issue before I go buying a new computer case or something. Thanks in advance.
 

Read other answers
RELEVANCY SCORE 42

Hello,
So lately I've had a problem with an .exe called kernel and kernel32. This has been going on since two days ago. I've attempted to solve this problem by scanning with malwarebytes and it turned up with two trojan files which I deleted. While this seems to have done something, it hasn't done enough maybe. I know where these kernel and kernel32 files (as well as these other files that accompany them) and when I try to delete them, I am told I need permission from my computer. As in, my computer is telling my computer that I don't have permission from myself. What am I doing wrong?
ps I'm a scrub when it comes to this sort of thing.

A:A definite trojan

Bump please

Read other 4 answers
RELEVANCY SCORE 42

Well, there is certainly a virus... but every time I find the file in system32 and delete it... it regenerates itself as a new file with a different name...

I wasn't too worried about it until just a few minutes ago my computer wouldn't start up right away as it always has

constantly slows the pc down (but as soon as I disconnect the usb for the internet the system speeds up again)... its causing the motherboard to beep (a phaser like noise.. not a beep but a tone that goes down in pitch and lasts for just a second) which coincides with some glitching with the taskbar/buttons/title bars (turn black)

I'm attaching a hijackthis log... but it seems to be shorter than the other ones that I've looked at.. so if I missed a step I will do my best to correct it

and if you would like the names of the files the virus has made I will list them but I wasn't sure if it was actually relevant.

thank you!




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:27:22 PM, on 11/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java... Read more

A:definite virus

Hello -

HijackThis is somewhat limited for today's infections. Toward that end, we ask that every member perform the steps we have in this sticky topic, and post those logs.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/secu...oval-help.html

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Read other 19 answers
RELEVANCY SCORE 42

For the past week or so I have noticed my computers performance slowing down dramatically. Than about 3 days ago, a lot of funky stuff starting happening. First, I have Windows XP Professional Edition, use Avira Free Edition for Virus Protection, regularly run Adaware 2008, Spybot, and CCleaner.

I have noticed that everytime I try to update Avira, it begins the update, but than that window closes down and will not update. Than suddenly my Windows automatic updates were turned off, and I have been unable to turn them back on. Than I began repeatedly getting messages that either Internet Explorer or Firefox has encountered a problem and must close etc. Than I noticed I would suddenly get a new tab with some bogus spyware scanner telling me I was infected and to download the following and it would bring me to the following website - adserver.adtechus.com Obviously I didn't download anything. I have not downloaded any new music, or any files in the past few weeks and have installed no new software. I ran an Adaware Scan, Spybot, and Avira Scan and cleaned everything I found. I am still having the same problems though. I removed and reinstalled Avira, but still cannot get it to update and cannot get the Microsoft Auto Updates to function. And today, when I logged on, Avira was completly turned off and I was sent to that Adserver.adtechus.com site again. I am prettly sure I have some kind of virus or malware. I have a Hijackthislog, but I know this is not the pl... Read more

A:Definite Infection

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen, click on the Show Results button t... Read more

Read other 7 answers
RELEVANCY SCORE 42

for a little back ground on the problem: a couple days a go my symantic endpoint antivirus picked up some trojan.gens and trojan.backdoor viruses. it said it cleaned them up but problems persisted. i tried to system restore and thats when i got real problems. most of my files seem to be missing even though my computers memory has decreased. parts of my registry seem to be missing (i couldnt run .exe files until i found a fix online for that). i also get redirected from google to random sites. and some programs wont open saying i need administrative access even though there is only one user on this computer and it has administrative access. i ran an immunet protect scan and it found NirCmd.exe, APUlauncher.exe, and APUUpdateClient.exe as threats and quarantined them. this still hasnt fixed my major problems...please help.

the administrative control problem wouldnt let me run hijackthis... and GMER opened then quickly closed. when i tried to open it again i received the same problem as hijackthis (this leads me to think maybe a virus is doing this?) idk what i should do about this problem since i cant post those logs here. but i can at least post the dds log...

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.19120 BrowserJavaVersion: 1.6.0_23
Run by Lehigh at 10:16:12 on 2011-08-25
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.2038.849 [GMT -4:00]
.
AV: Immunet Protect *Enabled/Updated* {E26D838D-778A-C93D-0B41-46E786995C11}
SP: Windows Defen... Read more

Read other answers
RELEVANCY SCORE 42

Hello there.
I have posted this same at HjackThis and malware forum as i am not sure which one i am suppose to post it at
"I hope someone here would be able to help me urgently. In the last couple of days, my pc randomly freezes while surfing or while away and i had to reboot. More recently, I could not playback wmv media files in Real player and Windows media player. I keep getting a msg."Windows Media Player cannot play the file. The Player might not support the file type or might not support the codec that was used to compress the file."However, I was able to do playback on audio music files on Real player but not my Windows media player.
I have recently updated my utorrent version and files download. I suspect that it may have started from there.
I have done reinstalling the players but even older version windows media isn't able to do playback. I have done Malwarebytes and spybot scan nothing came up. I have done Grisoft Avg7 scan, nothing came up. I have done TrendMicro and Bitdefender on line scan, nothing came up."
I would appreciate if someone pls help me.
thanks

A:A definite possible infection. What do i do?

I have posted this same at HjackThis and malware forum as i am not sure which one i am suppose to post it atHi; do you mean you posted a HJT log somewhere on this site for review ,as it does not appear to be on here

Read other 4 answers
RELEVANCY SCORE 42

Slight problem, before you read what exactly is wrong, I was able to download Hijack This but I am not able to run it. Clearly the malware is preventing me from running this. Any solutions? I dont want to waste anyones time, and Im not sure if you can help me without the log, so I wanted to make that clear prior to reading further.

My computer: HP Pavilion s7320n Slimline PC, Service Pack 3

Problem: about 4 days ago I restarted my computer, I opened a game and the moment I opened it I receive an error, "Explorer.exe Application Error, The instruction at "0x85eadcd4" referenced memory at "0x85eadcd4". The memory could not be written. Click on OK to terminate the program. Click on CANCEL to debug the program.

I have tried to run the following programs: Hijack this, Bitdefnder anti virus, avast, housecall/trend micro, malwarebytes anti malware, Spybot search and destroy. Most have not been able to install, if it does install, I can not run it what so ever. I was able to run the Bit Defender websites quick scan, it showed 2 trojans that popped up:

C:\Windows\essledv.exe - trojan.log.nj.h
C:\documents and settings \HP_administrator\application data\pc\agent.exe - trojan generic.2843412
The only anti virus/cleanup programs I've successfully run(as downloads) are AdvancedSystemCare & CCleaner.

I am not able to launch most games & Ventrilo. I am (most of the time) able to open Firefox & Opera. Occasionally after searching on google I... Read more

A:Definite Malware

Hello LosLizy,

Download Rogue Kill

Double-click on rkill.com to run it. You will probably need to run this program a few times to stop the malware process running. The malware will probably complain about being stopped but please ignore this. Do not reboot your computer after running rkill as the malware programs will start again.

Then..
Please download OTL to your Desktop
Double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Under the Custom Scan box paste this in:netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles


Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and paste them into your reply.

Note: Unless otherwise instructed always post the logs in the forum. If reports don't fit on ... Read more

Read other 3 answers
RELEVANCY SCORE 42

My PC contracted something vicious: it only boots up and shuts off. I installed the HDD as a slave on another PC. I ran virus and malware scans on the slaved drive; I went to System Restore on the drive and disabled it. I ran more scans. I removed FakeAlert, TrojanDropper, Fake.Driver,
misleadingdapp, installavg, all sorts of stuff. Everything showed up clean.
I booted to the CD, ran a Repair on the OS and it acts the same.
What is my next step?
Thank you.

XP Home
 

Read other answers
RELEVANCY SCORE 41.6

Hello I'm new to this site and in definite need of help. I am positive I have something on my system that is not allowing me to update anything: my windows update is disabled (and I can't enable it); virus software won't update, including kaspersky free online scanner; and any program showing the time also shows 'VIRUS ALERT!" Help would be much appreciated.

Thank You

A:Definite Virus Problem

Try running a full system scan with Malwarebytes' Anti-Malware (Instructions).

Read other 15 answers
RELEVANCY SCORE 41.6

Will different brands of memory with the exact same specs run in dual channel "fine"? So far all the answers I get is 55% yes and 35% no, and 10% that are of no help at all.

SO here it goes, will different brands work in dual channel? I need to know before I buy.

Any help appreciated.
 

A:I'm still not getting a definite answer about this question.....

Use the same brand, specs, and speed memory in pairs, or better yet buy some good quality "matched pair" dual memory sets

There's your definite answer... Just maybe, you don't want to hear a definite answer
 

Read other 4 answers
RELEVANCY SCORE 41.6

Hi,

I am experiencing extremely slow start times. Most of my programs fail and will not open. My Kaspersky Internet Service will not load and says it is disabled yet the process is still running. computer is slow beyond belief! Please Help!

Windows XP Home Edition Laptop
Service Pack 3

*Note* I did a GMER scan about 5 times and everytime it crashed and gave me a black screen before finishing, after which I had to shut the laptop off by holding the power button for 5 seconds. I then tried running the scan after renaming gmer.exe but that did not help. I was able to save a ark.txt file a few seconds before this happened. Because of this, I also have a "gmer initial scan.txt" in the attach.zip file.

Thankyou for your time and hopefully I hear from you soon!

DDS.txt:

DDS (Ver_10-03-17.01) - NTFSx86
Run by Andy at 13:36:04.85 on 01/05/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.411 [GMT -6:00]

AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\LE... Read more

A:Definite Virus... Possible rootkit HELP!

Howdy there and welcome to TSF Forums

I'm Steve and I will be helping you throughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Vista users please make sure you all run commands with administrator rights (right click icon - run as administrator)

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial posting then the thread will be closed.

----------------------------------

I notice that you have run Combofix on this machine:

Why we don't ask you to run ComboFix from the onset

As stated by the author of ComboFix:

Quote:




ComboFix is a very powerful tool which when improperly used may render your machine to a doorstop.

We first need to verify if there's any rootkits present and how they could affect our tools. DDS & GMER are preliminary scans. We use their logs to map our strategy for attack.

With these logs we can determine the infections present & decide whether to deploy ComboFix.




As you h... Read more

Read other 19 answers
RELEVANCY SCORE 41.6

I had an infection a couple of days back - fake MS Security Essentials pop up. I didn't click anything on the pop up knowing it was false but instead followed the various rKill and Malwarebytes instructions which removed it. But I still have the google redirect thing happening. The infection want to redirect my google searches to a new page (through brawsing-check.com) or straight to a malicious URL. I've blocked this domain in the router so at least that seems to have stemmed the problem. Also the first time I start exploer it freezes it (just the top bar and a white window. It doesn't seem to affect the application as I can open another instance of ie while that window is still crashed.

I have tried every sort of cleaning going: Avast scan, Avast boot time search, CCleaner, Spybot etc I've reset the router and more.

GMER threw up a couple of oddities most interesting was a whole host of red in the registry under local_machine/sam/sam/* AND i've just noticed that I have what looks like a rogue device attached to my router (boxes for an IP address). As you can see for the DDS report there is a possible rootkit infection, I just don't seem to be able to catch it.
DDS (Ver_10-12-12.02) - NTFSx86
Run by Nathan at 10:32:57.90 on 13/12/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.2046.874 [GMT 0:00]

AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128... Read more

A:Definite infection, but nothing finds it!

I'm not bumping! I have tried to run the GMER scan but it crashes so I can't save. It comes up with a number of entries under rootkit/malware before it finally dies. The last two are

Type: Disk
Name: \Device\Harddisk0\DR0 **Note: the second entry is \DR1 **
Value: sector 32: rootkit-like behaviour **Note: the second entry is sector 63 **

Then it crashes.

Read other 3 answers
RELEVANCY SCORE 41.6

Logfile of HijackThis v1.99.1
Scan saved at 06:06:41, on 25/07/2010
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18444)

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=EM&Loc=ENG_GB&Sys=PTB&M=eMachines E510
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=EM&Loc=ENG_GB&Sys=PTB&M=eMachines E510
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=&Br=EM&Loc=ENG_GB&Sys=PTB&M=eMachines E510
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gateway.com/g/sidepanel.html?Ch=Retail&SubCH=&Br=EM&Loc=ENG_GB&Sys=PTB&M=eMachines E510
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Too... Read more

Read other answers
RELEVANCY SCORE 41.6

Hey,
first of all I use Windows xp, sp 2. Hate to say that it is in greek (I am in greece and this is the pc of my parents, I would never ever ever use any other language for my system other than english) and some programs run in german (we lived in germany for many years, so we are bilingual). I only state that because in order to write this post I will have to translate names and messages either from greek or german into english, under which the accuracy of the descriptions may suffer.

So,
It all happened when I downloaded a video-codec to watch a streamed video. Before running the installer I scanned it with Panda Internet Security 2007 and it came out clean. I ran the installer, and afterwards these things started happening all at once:
There were suddenly shortcuts on my desktop of which I didnt knew any - something like "immediate security" or something like that. Also, an icon on my system tray appeared and continuosly warned me about my pc having been exposed to serious threats and needing protection right now. At the same time, an unknow anti-virus program - antivirus heat? virus heat? something like that - which was installed on my system without me knowing, opened its main window and started performing a virus search since I appeared to have been infected by spywar and trojans. The list of infected objects grew bigger an bigger, but seconds after that Panda internet security sent out a log message informing me about some virus having been blocked and ne... Read more

A:Definite Infection - Looks Like Smitfraud - What To Do?

to clarify a bit; can you kindly confirm what your present installed antivirus program is and what other protection is also on board ? have you yet run a full scan with the superantispyware and what did it find ?It all happened when I downloaded a video-codec to watch a streamed video. Before running the installer I scanned it with Panda Internet Security 2007 and it came out cleanfrom where did you download this 'program'?one presumes you have not yet run either the HJT tool nor combofix (please do NOT run EITHER unless instructed to do so by an authorised member of staff)

Read other 4 answers
RELEVANCY SCORE 41.6

DDS Log:
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 10.9.2
Run by Jimmah Dean at 12:02:51 on 2013-03-11
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8109.4986 [GMT -6:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program F... Read more

A:Definite TDSS bot on my computer.

Hello sausage Welcome back to The Forums!!Around here they call me Gringo and I'll be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back ... Read more

Read other 29 answers