When my Norton Internet Security 2005 runs a disk drive scan it locates a file it identified as Spyware in the Windows Directory. The file name is symentra .exe. I've currently blocked access to the Internet for this file but when it tries to access it just keeps trying relentlessly. Does anyone know if I need this file or is there a way to delete it?
View 7 RepliesIn the registry there are 'Legacy' entries which cannot be removed. Are these needed and if no, can they be removed?
View 14 Replies View RelatedI have a computer that runs windows xp pro, service pack 1. I was having trouble with freezing and a whole lot of pop ups, I started a virus scan with anti vir and it deleted a whole bunch of trojan horses, but didn't find any viruses. I installed the free version of AdAware and every time I try to run a scan, it starts ok but after a few minitues it has found about 20 critical objects when it just turns off by itself. I have restarted it several times and it does the same thing. I have downloaded spyware doctor and spybot, but every time I try to install them, it tells me that a dll or some other thing like a scripter cannot install. Can someone tell me why AdAware is quiting by itself and why spybot and spyware doctor cannot be installed.
View 15 Replies View RelatedI am having trouble loading software on my computer after removing adwareand spyware. Every time I try to install new software I get the followingerror messag:
C:WindowsSystem32Autoexec.NT. The system file is not suitable for running
MS-DOS and Microsoft Windows applications. Choose 'Close' to terminate the application.
My startup time has increased by at least 8 mins
my HJT log is:
Logfile of HijackThis v1.99.1
Scan saved at 11:33:54 PM, on 27/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
C:Program FilesCommon FilesSymantec SharedAppCoreAppSvc32.exe
C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
C:Program FilesNorton SystemWorksNorton GoBackGBPoll.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:PROGRA~1NORTON~1NORTON~1NPROTECT.EXE
C:Program FilesSpyware Doctorsdhelp.exe
C:WINDOWSsystem32 cpsvcs.exe
C:WINDOWSSystem32snmp.exe
C:PROGRA~1NORTON~1NORTON~1SPEEDD~1NOPDB.EXE
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32MsPMSPSv.exe
C:Program FilesJavajre1.5.0_11injusched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMSN MessengerMsnMsgr.Exe
C:PROGRA~1TASKBA~1TaskBar.exe
C:Program FilesuTorrentutorrent.exe
C:Program FilesNorton SystemWorksNorton GoBackGBTray.exe
C:WINDOWSsystem32 askmgr.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesMSN Messengerusnsvc.exe
C:Documents and Settings
.chanDesktopVundo Remove ToolshijackthisTJH.exe.exe
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0AcrobatActiveXAcroIEHelper.ocx
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:PROGRA~1SPYWAR~1 oolsiesdsg.dll
O2 - BHO: (no name) - {61ACC408-B733-482E-BDF1-C020F10014FE} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.0_11inssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:PROGRA~1SPYWAR~1 oolsiesdpb.dll
O2 - BHO: (no name) - {C47A9554-195A-4769-9B13-04F15B450A39} - (no file)
O2 - BHO: (no name) - {CF293022-3C24-4843-B47F-4F38D7334F4D} - (no file)
O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 - HKLM..Run: [osCheck] "C:Program FilesNorton AntiVirusosCheck.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.5.0_11injusched.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [Taskbar Hide] "C:PROGRA~1TASKBA~1TaskBar.exe" -Start
O4 - HKCU..Run: [�Torrent] "C:Program FilesuTorrentutorrent.exe"
O4 - HKCU..Run: [Spyware Doctor] "C:Program FilesSpyware Doctorswdoctor.exe" /Q
O4 - Global Startup: Norton GoBack.lnk = C:Program FilesNorton SystemWorksNorton GoBackGBTray.exe
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_11inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_11inssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:PROGRA~1SPYWAR~1 oolsiesdpb.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:PokerTitan Pokercasino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:PokerTitan Pokercasino.exe
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:Program FilesNorton SystemWorksNorton CleanupWCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:Program FilesNorton SystemWorksNorton CleanupWCQuick.lnk
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:Program FilesPartyPokerRunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:Program FilesPartyPokerRunApp.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/...x/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {341FF14B-00CB-49F5-A427-A164DF1D5E1F} (MALPlaybackCtrl Class) - http://musicstore.connect.com/XSL/mb...LStreaming.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-48.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1160655278677
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pu...sh/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - igfxsrvc.dll (file missing)
O20 - Winlogon Notify: mljjgda - mljjgda.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:Program FilesNorton SystemWorksNorton GoBackGBPoll.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:Program FilesNorton AntiVirusisPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE
O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:PROGRA~1NORTON~1NORTON~1NPROTECT.EXE
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:Program FilesSpyware Doctorsdhelp.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:PROGRA~1NORTON~1NORTON~1SPEEDD~1NOPDB.EXE
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedAppCoreAppSvc32.exe
I'm in the process of repair/recovery of my machine (Dell Inspiron 8500 with Windows XP Home, Service Pack 2). I'm following exactly the instructions in:
http://attachments.techguy.org/attac...chmentid=62075, but a problem has developed. The "software" file (which is the file that the original blue screen error message says is "corrupt, absent or not writable") will not copy to the new tmp directory to create the backup. My understanding from the article is that this backup file (software.bak) will later be used to restore correct settings for various software applications. Since I can't copy it, it appears that I am screwed,
Evidently, the vic32.dll was removed when I removed some adware/spyware that had infected my PC. I have since re-downloaded the vic32.dll, but do not know where to locate it. Can someone tell me in what folder the vic32.dll should reside?
View 3 Replies View Relatedcomputer is running Very Very slowly. I have reformated and done a spyware and virus scan.MIcrosoft Windows XP Home and a Broadband connection
View 7 Replies View Relatedi been noticing my pc not running as smoothly lately so i decded to run a panda activescan virus scan and it camse up with 5 spyware files and 17 rootkits/hackertools here will be my HJT log and my Panda Log Can you please tell me everything that definately needs to be removed and just some things that i should remove for some reason. thanks what could be the cause of all this spyware/rootkits?,and also what startup items need to be removed,
View 8 Replies View RelatedI have XP Home and Microsoft Anti spyware found some malware (IBIS Toolbar) that was removed but on rescans, it shows up again, but now located in the restore points. I believe that I have to turn off System Restore and reboot and then turn restore back on and do a new restore point.
View 10 Replies View Related"the directory or file cannot be created", when I try to move my files around. This just started today, I have spent hours online trying to find a solution .so now I am asking here.
View 7 Replies View RelatedI was running The Cleaner for the first time and it found several files to delete that I can't seem to find on my system. It shows them to be temp files but I like to be sure so I went searching for them. They're not visible. I've enabled the see all files so it should be there. But it's not. I did however find these files and am wondering why they would be found under IE5 which I haven't used now since the rebuild. And I don't think that was even under this hard drive! Is it safe to let it delete, or is that stuff I shouldn't delete?
C: Documents & Settings: User: Local Settings: Temporary Internet Files: Content.IE5: 3I1TVRX8, 4NM0HAS5, 7D8UQMOE, index.dat
Also I'm concerned by this message that keeps coming up saying Browser Help Objects have been detected - The following BHO has been added to your system: {BDF3E430~B101~42AD~A544~FADC6B084872} and I can either remove it or keep it. I ran a program called BHODemon to check it out and it found several BHO's but they were all legit. Could this all just be from a conflict from having SpywareGuard and Spybot both on my machine? Spybot seem to be going crazy asking if I want to change things. I can't stop them from popping back up when I close one another comes up. The error messages are always different too which is really confusing.
I have a laptop, and a file named 1.tmp has appeared (how or why I do not know) in my c/windows/system32 folder that throws up an error message window saying it cannot find the program to run the tmp file, and that appears on my screen every time I log on.So; I thought I could simply go into the sys32 folder and delete the 1.tmp file by putting it in the trash can, as it obviously does not belong there.BUT it will not let me, if I try I get an error message telling me I do not have access or the disc is full even when I use the administrator level so now I am completely at a loss and I do not understand.
View 8 Replies View Relatedwhen accessing any application or programme from my hard drive I get the following error message "The file or directory c: is corrupt and unreadable. Please run chkdsk utility." I then click to get rid of the error message and the utility works fine. I have run chkdsk several times but it does not shift this error message.
View 2 Replies View RelatedI recently reinstalled Windows XP Home w/SP2 on a system and everything worked well. I also installed a Seagate 500 GB HDD as a slave drive. I had no problems assigning a drive letter (D:) and mapping it as a network drive. Then yesterday, a Windows error message popped up saying there was "Delayed Write Failure" or something similar. It was at that point the the slave drive became inaccessible. I can still see the drive in My Computer but that is all. I went into disk management and click on properties, it says the file system is "RAW". I have no idea what that means.
The drive is still assigning a drive letter (d:) and it says is it is healthy (active). However, when I try exploring the drive it says "D: is not accessible. The file or directory is corrupted and unreadable"." I then tried using CHKDSK to check the drive for errors in the DOS prompt. But again, nothing happened. I used Seagate Diagnostic tools to scan the drive for errors. There is nothing physically wrong with the drive as it passed all the tests except for the file structure test.
File or Directory C:$MFT is corrupt or unreadable. Run CHKDSK /f.Got this message on a WinXP Home SP2 box. I can't run chkdsk /f because I'm using the disk (obviously) When I reboot however, the system does it's own chkdsk but doesn't find any errors. The message keeps coming back. I don't get any hits when I
search the KB.
I use a batch files for various maintenance stuff.Get this: When the batch file (.bat or .cmd), is in ONE PARTICULAR DIRECTORY, the defrag command in it echos endlessly, but doesn't execute. Even if the batch file contains only just the one line.If the batch file is in any other directory, it works fine. Of course, I keep all my batch files in the same directory ("C:Program FilesBruce"), and I can find nothing anywhere in Windows that should cause this directory to be any different than any other. Addition a few minutes later: Now the simple one-line batch file will sometimes work, sometimes not work, when in other directories. This is weird.
View 7 Replies View RelatedI am trying to write a batch file to strip the 4 leading characters from the
name of all files in a directory. I tried using rename but was not having any
luck getting the pattern matching to strip the characters off. Please let me
know if anyone knows a way to do this in a batch file.
Trying to install a downloaded program, ERROR 5 Unable to execute file in the temporary directory. Setup aborted. Error 5: Access Denied First time ever with this problem.
View 6 Replies View RelatedHow do I set it up so that when I boot up I automatically open in the root directory (C:). That is, I don't want to have to click on My Computer, C: each time I boot up.
View 3 Replies View RelatedI really need some help here. I have a second HD with no OP system on which I just use to store most of my music, pics, documents etc. The problem is when I click on one of the folders (my most important one I get the message "file or directory is corrupted and unreadable"I really need to get to this folder,
View 8 Replies View Relatedthe file or directory C:\windows is corrupt and unreadable If I restore factory settings will this fix problem? I've run chkdsk utility a million times with no luck
View 1 Replies View RelatedI read the advice to start in safe mode to delete files that gave the errror message cannot delet file - source file not found. They wouldn't delete in Safe Mode either. I am trying to delete mp3 from my c drive because I have an external disk where I have my music library. I can delete them one at a time without getting the error message but not a bunch of them. Some of them I have been able to delete in a bunch.
View 14 Replies View RelatedI have recently gotten over a 2 month long problem with downloader trojans. My computer was so choked with pop ups that it would freeze. I am sure that is a common problem, but the interesting part is that I was not able to find any program that could isolate the problem and get rid of it. I tried practically every recommended program I could find without success. Then I happened to find the problem. task manager was unable to close an exe file. I searched and found it buried in my Windows directory.
View 4 Replies View RelatedOS is Win 2K. I have a folder containing about 150 files Using Explorer, I can open the folder and view a list of the files. Is there any way to save that list as a text document?
View 7 Replies View RelatedMoving Files comes with error: The directory or file not be created
View 1 Replies View RelatedI dont know when it started, but almost exactly after a week or so of me using this machine, it comes up with a The File or Directory C: is corrupt and unreadable. Please Run the Chkdsk Utility. error.I always try and run checkdisk, but then it comes up with the exact same error trying to load Checkdisk.
I end up Reformatting, and reloading everything, and then almost Exactly, The Same thing happens in a week... or just under. (its been 6 days now i think since the last time)
Cannot Delete Projects: The File Or Directory Is Corrupt Or Unreadable Keep getting this message when i try to delete a folder on my computer and whatever i do it wont delete
View 9 Replies View RelatedI would like to set up a windows 2000 server or 2003 server with levels of permissions on file and printer sharing for the assigned users.
Does this require Active Directory?
Does anyone know how to pipe a directory listing in windows to a text or excel file which includes the file summary data, e.g.Title Comment Author Owner field.
View 8 Replies View RelatedSymantec's site says it's a backdoor trojan, but my virus program doesn't detect it. In the services configuration it's named iprip, no description & start up is auto.Under properties-general-path to executable C:WINDOWSSystem32svchost.exe -k netsvcs.dependencies-none.I searched my files & found file NETIPRIP .INX-Route Listening Service.
View 10 Replies View Related