Ok i just got this nasty infection with one then mone spyware.I'm not sure what they all where but i know one was command.exe and one was Surf Asistant or something like that,I've used the folowing on it and cleaned up everything but this one .dll file that shows up in my HJT log and is still causeing my web browser to be redirected every 1-3 mins.I've tryed the folowing programs to get red of it,
View 4 Replies
I was online with yahoo messenger and I tried to go to a site and realized that my homepage addy had been changed, I figured spyware. I didn't think much about it until my wallpaper changed to something that appears to be an ad for spyware removal software with a "hotlink". I signed off and tried to run my spyware program and got an error message that it could not be loaded. I then tried to run my virus program, same thing. I then tried to get online to make sure my virus program was updated, same thing. It has also did this with several other programs as well as not allowing me to reset my computer to an earlier date (system recovery) nor will it allow me to get rid of the spyware ad wallpaper.
View 9 Replies View RelatedI have an infection that I haven't been able to rid on my own. I am receiving popups on the lower right claiming to be from the Windows Security Center with titles like:
Alert! You are receiving Spyware!
Warning! Your security and privacy are at risk!
The window has the name "Project1" in the task manager, and it has overridden my ability to end processes in the task manager.
I have problems with my registry WINXP sp2 adds east code by error
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlNlsCodePage]
"1252"="c_1251.nls"
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionFontSubstitutes]
"Arial,0"="Arial,204"
"Comic Sans MS,0"="Comic Sans MS,204"
"Courier,0"="Courier New,204"
"Microsoft Sans Serif,0"="Microsoft Sans Serif,204"
"Tahoma,0"="Tahoma,204"
"Times New Roman,0"="Times New Roman,204"
"Verdana,0"="Verdana,204"
and now I see some letters of the Spanish alphabet in Russian... (, , , or,, ) how I undo this thanks for its aid
I have an Epson RX500 all-in-one. When I use the "copy to fax" in the Epson Smart Panel, it sends the scan to XP's fax software. The fax preview shows the page I scanned plus a blank page. It also faxes out the extra blank page. Epson tech said it was XP, so I downloaded a trial version of another fax software. This time the fax preview showed and faxed just one page as it should.
View 1 Replies View RelatedDue to a faulty RAM module my PC crashed and showed me an error that a was corrupted.My vendor tried to reinstall XP on another partition of my harddisk.But meanwhile,by reinserting another good RAM module the problem was solved and the installation was left pending. Now,I'm having two options one,Windows XP proffesional and two
View 5 Replies View RelatedThere are two excellent spyware removal apps available and they are both FREE so there is no reason to not use them regularly. The two best apps there are for removing spyware are SpyBot Search & Destroy and Ad Aware. IT IS IMPERATIVE THAT YOU USE BOTH OF THESE APPS SINCE ONE FINDS WHAT THE OTHER MISSES AND VICE VERSA, YOU ARE NOT SAFE USING JUST ONE OF THEM. There is one other app that I HIGHLY recommend is for spyware prevention, SpywareBlaster. This app sets certain registry entries that prevent spyware from ever installing, it DOES NOT run in the background using any resources, you just set it and forget it. Once you have installed these three MUST HAVE apps you then need to update them and keep them up to date. I would recommend checking for updates weekly, it’s just like your antivirus app, you need to stay protected from the latest spyware out there. To update SpyBot just open the app from your start menu (use the advanced mode option) and select “search for updates” it will then show you what updates are available for download, always install all the updates. Another feature that SpyBot has is called “Immunize”, you will see an icon for it. Select the icon and under “Permanent Internet Explorer Immunity” select “Immunize” this works in the same way as SpywareBlaster in blocking new spyware. It also gives you the option of locking your hosts file against hijackers, I highly recommend using this option as well. To update Ad Aware just open it and select “Check for updates now”. For SpywareBlaster it is mostly the same, open it up and select “Check for updates” once you update this you then must select “select all” and then “Protect against checked items” so that the updates you just did take effect. Anything these apps find is spyware and should be removed, if you choose not to remove what is found then you have no one to blame if your pc crashes due to spyware or your privacy is invaded (including these companies stealing your credit card number and identity
View 9 Replies View RelatedI'm experienceing problems running the internet. Each time I try connecting tho the Net, despite changing the default homepage which has been changed to c:secure32.html I get a warning message about spyware I have also run Spybot Search and Destroy and the Lavasoft Ad-ware and removed all of the critical objects.
View 14 Replies View RelatedMy PC is infected with some bad stuff and I'm not sure what to do. So far I have tried to run Spybot S&D, Registry mechanic, ewido anti-spyware, Spyware Doctor and SpywareBlaster all of these programs seize when carrying out a scan and I have no option but to close the pc down with the power button. I am pretty much at a loss as what to do next and was hoping one of you kind souls could help me. I am running xp.
View 14 Replies View RelatedI rather foolishly deleted several fonts from XP. How can I restore them?
View 8 Replies View RelatedOnce the Deleted File has been emptied can we get all that I deleted back?
View 6 Replies View RelatedCan I recover messages I accidentally deleted in Outlook Express of Windows 2000XP? These messages were in their own file but somehow got moved to a subfile of the Deleted Items folder. In trying to removed the Deleted Items folder the sub-folder went with it. There were a large number of messages I had received via e-mail that I intended to keep.
View 1 Replies View RelatedFirst I booted from the Windows XP cd because I wanted to format the C drive. I had forgotten I had my external hard drive still plugged in and I accidently deleted the partition for it and created a new one. I didn't FORMAT it, but then when I started up my computer, all the files were gone. So does that mean my files are premanently deleted or can I save the files somehow?.
View 8 Replies View RelatedI accidentally Deleted a partition how can i get it back?
View 13 Replies View RelatedA way to recover deleted files that were deleted from the recycle bin.Maybe someone has a favorite utility that they've used with success.I am using Windows XP.
View 3 Replies View RelatedHow do I pull up deleted emails once they have been deleted from the "Deleted Items" folder?
View 3 Replies View RelatedThere is pop-up problem with my PC.when ever i start any program on internet number of pop up comes.
View 1 Replies View RelatedAbout every five minutes or so we get a pop up for our hp 1300 all in one. The main box pop up is as if we just installed new software for a printer, which of course we have not, and then a box pops up that has 1300 trb in the header and then says windows is configuring, and then another box pops up that says 1300 help in the header and then says it is also configuring. Nothing will print and we have one doc in que that we cannot cancel.
View 7 Replies View RelatedThis one has stumped me but I believe the cause is related to the million versions of security dlls MS has created pre-and post sp2.
The symptoms:
Linked popups in IE generate a blank window.
Event viewer property pages do not open Services property pages do not work
Javascript "A disk error has occurred during a read operation"
Firefox opens the window but also adds a second blank one for a popup
Links in outlook emails open fine in new window
AOL webmail works correctly new window with email in it
Since this behavior arrived out of the blue and is specific I believe some proximate events were:
Install and de-install Pluck (RSS browser tool)
Install and de-install Java V1.5 SE
AOL homepage saying it was upgrading (AOL mail does work)
To resolve this I have:
Used Iefix to deinstall reinstall IE
Updated to all fixes sans sp2
run sfc /scannow
downloaded current scripting engine from MS
re-registered all suggested dlls for ie6
run current Macafee on everything
gone through MS knowledgebase
I did find two other users having the same problem with an extensive list of possible resolutions, none of which have worked.
so i went to msn and did the verify ( windows genuine advantage ) verification just to see if she has done it so we passed the test ,Its valid so no problem there .this is a dell machine >Dimension 5000< only a few months old, 3 at tops . she doesnt even use the net much . its a machine for picture editing .
any ideas why we cannot get the updates ..
also 1 time when i was on this machine surfing . this dell window poped up and showed something about updates , like it has over ridden Windows automatic updates . but i cannot find it anywhere on this machine
windows xp home sp_2 is what she has .
After setting up a password for the pc, I changed my mind and want the pc to boot up without showing the password prompt. All I've been able to find is how to remove the password but not how to prevent the prompt from popping up.
View 1 Replies View RelatedMy computer is being held hostage by the MovieLand Popups. At the time we were supposed to have signed up for MovieLand
View 3 Replies View RelatedHaving problems with popups all of a sudden, I'v never used hijack before and not really sure of what I'm looking at. I did attach a copy of log. Logfile of HijackThis v1.99.0 Scan saved at 4:45:27 PM, on 1/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exe C:WINDOWSsystem32spoolsv.exe C:WINDOWSsystem32CTsvcCDA.EXE C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:WINDOWSsystem32 vsvc32.exe C:WINDOWSsystem32MsPMSPSv.exe C:WINDOWSExplorer.EXE C:Program FilesCommon FilesRealUpdate_OB ealsched.exe
C:WINDOWSsystem32CTHELPER.EXE C:Program FilesMUSICMATCHMUSICMATCH Jukeboxmmtask.exe C:WINDOWSsystem32Ubxoiw.exe C:WINDOWSsystem32ctfmon.exe C:DOCUME~1JackLOCALS~1TempTemporary Directory 1 for hijackthis.zipHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.cnn.com/ R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.cnn.com/ R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:Program FilesICQToolbar oolbaru.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:Program FilescontMediaAnatomical Atlas HRMSDXM.OCX O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:Program FilesICQToolbar oolbaru.dll O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdreg.exe
O4 - HKLM..Run: [CTStartup] C:Program FilesCreativeSBAudigyProgramCTEaxSpl.EXE /run O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k O4 - HKLM..Run: [CTHelper] CTHELPER.EXE O4 - HKLM..Run: [mmtask] C:Program FilesMUSICMATCHMUSICMATCH Jukeboxmmtask.exe O4 - HKLM..Run: [version] C:WINDOWSsystem32Srkgph.exe O4 - HKLM..Run: [secure] C:WINDOWSsystem32Ubxoiw.exe O4 - HKLM..Run: [gcasServ] "C:Program FilesMicrosoft AntiSpywaregcasServ.exe" O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe O4 - HKCU..Run: [TaskTray] "C:Program FilesCreativeTaskBarCTLTray.exe" O4 - HKCU..Run: [TaskBar] "C:Program FilesCreativeTaskBarCTLTask.exe" O8 - Extra context menu item: &ICQ Toolbar Search - res://C:Program FilesICQToolbar oolbaru.dll/SEARCH.HTML O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_05in
pjpi142_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_05in pjpi142_05.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: ICQ 4 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2- 9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab O16 - DPF: {640B39C1-D713-464F-92C3-75BD972B95EE} - http://www.sidestep.com/get/k42037/sb02a.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)- http://v5.windowsupdate.microsoft.co...?1094006758724 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://floridakeysmedia.tv/axiscam/C...CamControl.ocx O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10...o.cab33902.cab O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab O23 - Service: Adobe LM Service - Unknown - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.EXE O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
Every time I start my pc or during day I get this error message.It usually stacks like that because my pc was left on overnight, so it happens every 2 hours or so. I have no idea what this links to but it just started happening after I formated my pc, although I dont know why this started coming after many formats.
View 2 Replies View RelatedI get this popup/flag about once every 20 minutes on my computer. Not the internet, just my computer. Below is exactly what it says:oobebaln.exe - Application Error <X> The instruction at "0x77f517e2" referenced memory at "0x76fd7896". The memory could not be "written".Click on OK to terminate the program<<OK>>..I've searched the registry and all I can find is "oobe.exe" but that's all. Nothing containing the dialog in the popup at all. Has anybody experienced this? I'm running XP(home) on a Sony VAIO computer.
View 7 Replies View Relatedi have a really annoying problem where my computer wont let any windows pop up at all, for example, when i try to open the save as window, it will just sit there and not do it, when i try to open the shut down window, it wont do it, just sits there like i did nothing, extraction wizard windows wont come up, i cant open any of my anti virus programs or firewalls because they wont come up, not even installation windows and windows to play certian games come up, so i really need help on how to fix this, its not really crucial, but its a VERY big nuciancse
View 11 Replies View RelatedI want to be able to reset the password promt pop-up. I clicked on don't remember anymore passwords and I don't know how to find this prompter to let it remember passwords.
View 1 Replies View Relatedmy problems are two rundll problems that pop up on start up
The first one is:
C:WINDOWSsystem32slwkueph.dll
and the second one is:
C:WINDOWSsystem32pcuddyhy.dll
Im getting an intermittant error which brings up a dos window states
Description:
Application popup: 16 bit MS-DOS Subsystem : C:PROGRA~1AOL9~1.0waol.exe C:WINDOWSSYSTEM32AUTOEXEC.NT. The system file is not suitable for running MS-DOS and Microsoft Windows applications. Choose 'Close' to terminate the application
when i am accessing any secure site.the security alert pop -up come up ,i donot want that pop-up how to block security alert popup?
View 2 Replies View RelatedI own a Sony VAIO VGN-FS742/W with XP Home SP2 running on it.For a week now, I've been trying to get the System Configuration Utility popup window to stop appearing everytime I bootup my machine.I've even gone as far as disable all of whats in STARTUP tab. Which didn't resolve a thing.Every time I click on radio buttom to not showup but it still does. Is there any kind of Registry Hack that can be done to stop this?
View 14 Replies View Related
