2,959 Posted Topics
Re: [QUOTE=harmony99]and when i go into the folder where it was found, I can't find it to delete it manually![/QUOTE] For starters- Tell us the exact name of the folder where the file resides please. | |
Re: [QUOTE=Tree]I have a Nvidia Gforce 5700 ultra video card, which I have re-inserted[/QUOTE] Have you also tried reinstalling your video driver software; it could be corrupt? Also- do you get the same problem when you boot into Safe Mode? | |
Re: [QUOTE] O4 - HKLM\..\Run: [kfpxhyrtmwtl] C:\WINDOWS\SYSTEM\CZYUOYP.EXE[/QUOTE] You either missed the above entry, or it regenerated itself. Repeat crunchie's instructions above concerning its removal before posting another log. | |
![]() | Re: You need to give us more history on this problem in order for us to help you most quickly, as your post only tells us that you have a computer who's BIOS doesn't seem to recognize the drive. Give us specific background info on the problem. My first guess would … ![]() |
Re: [QUOTE=Paddy]I hope this helps...its my first ever reply to a HijackThis! log :P[/QUOTE] And not a bad first at that :) dragonoids- definitely do as Paddy suggested; you [i]are[/i] pretty heavily infested. Here are some more detailed instructions for Ad Aware, SpyBot, and general clean-up measures: A) Run a full … | |
Re: [QUOTE=ferdina][size=2]In my computer I have Win98 and Win2000. When I use Win2000, I can use the mouse, however, when I use Win98, there's no movement or any sign regarding the mouse.[/size][/QUOTE] - Is it a serial mouse or a USB mouse? - Does the mouse work if you boot Win … | |
Re: [QUOTE] C:\Program Files\Internet Explorer\iexplore.exe[/QUOTE] The above would seem to indicate that you still had one instance of Internet Explorer running when you ran the HJT scan. HJT can't perform all of its fixes when IE is open/running, so it's advised that you verify that [i]all[/i] instances of IE are closed … | |
Re: [QUOTE=traecastles]I have ATI's HDTV WONDER, and since installing it, an error message comes up everytime the computer is rebooted saying that "Run a DLL as an APP has encountered a problem....[/QUOTE] The "Run a DLL as an APP" error can have many causes. For starters, can you please tell us … | |
Re: Also- letting us know exactly what make/model/version of sound card or sound chipset you have (as well as what sound drivers your system is currently using) would help. | |
Re: [QUOTE=spx]Hello maybe you should get back to the problem and don't talk about what browser you guys use. Help Bill_Lumberg instead ^^[/QUOTE] Um... right. Let's see- For your first post here, you decided to dig up a thread that is over 1 year old, and then proceed to post an … | |
Re: [QUOTE=marcusw90]Hey, everytime I close it IE, a damn error pops up saying it has to close the program.. but I just closed it![/QUOTE] When you close IE, the visual/graphical component will close first, but other non-visible components of IE take a bit longer to finish closing after that, hence the … | |
Re: 1. [QUOTE] Logfile of HijackThis v1.97.7[/QUOTE] Your version of HijackThis is out of date; please download the latest version (1.98.2). 2. [QUOTE]C:\Documents and Settings\user\Desktop\HijackThis.exe[/QUOTE] You are currently running HijackThis directly from your desktop; this isn't advised. HJT creates backup files each time you run it, and if you run HJT … | |
Re: [QUOTE=caperjack]get a blank floppy disk ,put in the a: drive and go to Start,settings control panel,add and remove programs ,and click on create bootdisk. or download one ,and copy it to the floppy. [url="http://www.mirrors.org/archived_software/www.bootdisk.com/winfiles1/boot98se.exe%5D"]http://www.mirrors.org/archived_software/www.bootdisk.com/winfiles1/boot98se.exe][/url][/QUOTE] Umm... but da computer she'a no boot; how'sa catladi gonna do dat? :mrgreen: | |
Re: Is there any more specific information available in the error message dialog box (under a "more info" button, perhaps? If so, please post it in its entirety. The info I'm looking for would be similar to the following format: AppName: rundll32.exe AppVer: 5.1.2600.0 ModName: srrstr.dll ModVer: 5.1.2600.1142 Offset: 00009765 In … | |
Re: [QUOTE=flowerman]are there places in Windows that I should check to see if these sites are on an excluded list?[/QUOTE] 1. In your Internet Options control panel, check the Restricted Sites section under the Security tab. 2. Open your "hosts" file in Windows Notepad. In XP the file resides in the … | |
Re: Somewhat along the lines of what caperjack is alluding to: Open Task Manager and see if you can identify which running processes are eating up your system resources. If Task Manager shows certain programs or processes to be using what seems like an inordinately large amount of memory, tell us … | |
Re: [QUOTE=MayDay1911]Questions: I have and use spysweeper. It still indicates that Win32 Driver is present in my register keys. Is there a way to be totally rid of this strain? Also, will my McAfee step up to prevent these viruses from returning? Or is it time to scrap McAfee for Norton … | |
Re: 1. Can you give us any history concerning the problem? That is, did you add/remove software or hardware, or make [i]any[/i] other changes to the system around the time the problem started to happen? 2. Can you [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=61"]boot into Safe Mode[/url] or perhaps "last known good configuration? | |
Re: [QUOTE=SilentBob3208]...and is this a result of spyware, virus, or trojans?[/QUOTE] Could be. Get free online virus scans at the links below, and check out threads in our Security forum to find out where to get and how to use some of the recommended spyware/adware/hijacker/etc. detection and removal utilities. [url]http://housecall.trendmicro.com/[/url] [url]http://www.pestscan.com/[/url] … | |
Re: [QUOTE=tyler_03_25]... iv tried all of them but then the pc just starts[/QUOTE] It does start? That seems to be what you're trying to say; can you be more clear/specific? [QUOTE=tyler_03_25]it got a quater of the way of deleting my stuff then stoped[/QUOTE] Uh-oh. Sounds like an aborted installation, which is … | |
Re: Since this is a Mac-specific question, I'm moving it to the Mac forum. Also- be aware that [i]we[/i] don't know that your need for the password removal is legit, and due to possible legal ramifications for us, threads here involving password removal/retrieval/cracking are highly discouraged and are subject to closure … | |
Re: What are the exact problems your friend is experiencing? 1. Get rid of SpywareStormer and SpyBlocs; they're bogus: [url="http://www.spywarewarrior.com/rogue_anti-spyware.htm"]http://www.spywarewarrior.com/rogue_anti-spyware.htm[/url]. Personally, I'd ditch ErrorGuard as well; my intuition tells me it's bogus too. Many trusted, legit, and free anti-spyware/popup/etc. programs can be found here: [url="http://www.majorgeeks.com/downloads31.html"]http://www.majorgeeks.com/downloads31.html[/url] 2. Do the following to clean … | |
Re: Does sfc.exe exist on your system, or is missing as well? If it does exist, try double-clicking on its icon in Explorer to run it, or type the full path to sfc in the Run dialog: C:\WINDOWS\SYSTEM\SFC.EXE | |
Re: That file is a component of Norton Anti-virus, but it seems to be missing or corrupted. You won't find it on your Windows CD, and unless you did a full/fresh reinstallation of Windows, you will still get the error. Uninstalling and reinstalling Norton should fix the problem. | |
Re: [QUOTE=kamee79]one of my WinXP Professional PC not getting an IP Address Automatically from my ADSL Router as it has a built in DHCP Service.[/QUOTE] Which [i]exact[/i] service? Obvious question, but can't you simply disable the conflicting service? [QUOTE=kamee79]Also when I open Internet exploror it closes as soon as its open.[/QUOTE] … | |
Re: Hang in there- I remember running across this exact problem/message about 2 months ago, but I won't be able to dig back for the information until tomorrow. I'll post here when I find it. | |
Re: [QUOTE=DaveSW]Can you post a new log please?[/QUOTE] Yes- your first log shows quite a few problems. This time, please make sure you have no instances of Internet Explorer running when you run HijackThis; your last log indicated that Internet Explorer [i]was[/i] running at the time you ran HijackThis: [QUOTE] C:\Archivos … | |
Re: [QUOTE=shagz1181]what i will try to do is remove the spyware on his system first and see what i can do from there..i did notice he has the wintools trojan. So i'll remove everything..have a feeling spyware might be part of the problem. Think it could be the Winsock?[/QUOTE] Some malicious … | |
Re: [QUOTE=joannetai]I've read a lot of the different posts and have tried many of the suggestions[/QUOTE] Can you please tell us [i]exactly[/i] what you have tried/done already? You're pretty heavily infested (with a lot more than the about:blank problem), and many of the commonly-suggested removal programs/instructions that you should have run … | |
Re: *Groan* - what you're asking about is called "bandwith shaping"; easily and cheaply done in a Linux environment, but not in a Windows network such as you describe (peer-to-peer). Some solutions are discussed here; what works for you will depend on your exact needs (and budget): [url]http://www.google.com/search?hl=en&lr=&q=+%22bandwidth+shaping%22+windows&btnG=Search[/url] | |
Re: [QUOTE=dlh6213]You have a lot to fix there, but there is a notice at the top of this forum requesting that all HijackThis logs be posted in the Security forum. You can either repost it or wait for one of the moderators to move it for you.[/QUOTE] Moving there now, buckle … | |
Re: Although the log is not totally clean, it doesn't look like there's much in it to indicate that "spyware" is the cause here; you might want to post the question (without including a HJT log) in the XP/2000 forum. This: [QUOTE]It's a Compaq Presario 5340... now exchanged it for 160 … | |
Re: [QUOTE]Can i change back to windows xp easily...[/QUOTE] As mikeandike22 mentioned- yes. Linux can be installed along side Windows, and afterwards will offer you the choice of booting into either OS when you start your computer. [QUOTE]I saw a demo of a commercial version of linux the other day, where … | |
Re: rundll.exe is a Windows system program which is responsible for loading/handling a number of Windows library files (.dlls). Given that, the error could actually be being caused by one of the dlls, but it's impossible to say which one. - Had you installed/modified/upgraded/deleted any programs, device drivers or other software … | |
Re: Extracting a fresh copy of msvcrt.dll from your Windows install disk might do the trick. Which version of Windows are you running? [QUOTE] I have checked for spyware and viruses. [/QUOTE] Which exact anti-virus/anti-spyware programs did you run, and did they find anything? If they did detect and fix problems, … | |
Re: "Tapping" or "clicking" sounds from the drive, combined with abnormal behaviour such as the computer freezing up, could very well indicate that the drive is going bad. On the other hand, the symptoms [i]could[/i] be caused by software corruption; either way though, the first thing I would suggest is to … | |
Re: [QUOTE=Roxielove]Yes....I did save Hijackthis pragram to a permanent file. [/QUOTE] What the others meant is that your log shows that you are running HijackThis from within a Temp/Temporary folder ( C:\Documents and Settings\Stephanie Walker\Local Settings\[b]Temp[/b]\HijackThis.exe in your case). I won't go into the details of why, but you should create … | |
Re: [QUOTE=olivia]is this due to overheating? but I never had this prob before the home page hijack[/QUOTE] Coincidences do happen, so it's best not to rule out possibilities too early in the game. Some of what you've described [i]could[/i] indicate overheating, especially since you said that leaving the machine off for … | |
Re: [size=4][color=Red][color=Blue]To members who are requesting a copy of the jpeg from [url="http://www.daniweb.com/techtalkforums/member.php?u=1537"]vlg466[/url]:[/color] [/color][/size]That particular member is rarely active on this site (only 3 posts total), and has not visited us since March. Considering that he/she hasn't posted in this thread in over 9 months, [color=Black][size=2]it [/size][/color][size=4][color=Red][color=Black][size=2]would probably be a better … | |
Re: [QUOTE=rsuave427]sorry about posting my log on that other thread...im new to this game...I appologize for the inconvienience.[/QUOTE] Thanks for understanding :) If IE is open, close it. Rerun HJT and have it fix the following: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - … | |
Recently we've had a number of questions regarding Anti-Virus programs finding infected files in the C:\System Volume Information\_restore folder, but not being able to delete or fix those files. One of our members (thanks dlh6213!) suggested that we post instructions for removing those files someplace permanent rather than having to … | |
Re: What else does the message say? If there's more to the message, give us all of it, exactly as it reads. | |
Re: Can you please give us some information as to where (in what folders) AVG found the infected files and what it said it was able (or not) to do with them. As much information as you can give us will help us get you sorted out most quickly. | |
Re: [QUOTE=melb100]I still have the problem with the "Error in unknown".... Oh and I am also getting another error message too sometimes. User32.dll error?[/QUOTE] Please give us the [i]full and exact[/i] text of the errors, including any numeric codes that might be in the error dialogs. | |
Re: Just edit boot.ini to correct the entries. You don't need an entry in boot.ini for the second drive unless it has an operating system installed on it, and you would like the choice of booting into that OS or the other. Assuming that the only OS you have installed is … | |
Re: [QUOTE=ear4aak]so I restored the ad's that were quarantined on the day I had the problem... and all is back to normal[/QUOTE] Um, let's ponder this for a moment: you "fixed" your connectivity problem by reinstalling the malicious or infected files?? Isn't that sort of like a doctor removing a diseased … | |
Re: Yes, the _restore folders under your C:\System Volume Information directory are indeed when the System Restore backups are stored, and they are protected systems folders which even anti-virus programs don't have permissions to modify. One of our members had a similar situation only two days ago; read through that thread … | |
Re: [QUOTE=romanflux]when you say reboot, is that the synonamous with restart?[/QUOTE] Yes, that exactly it. In terms of the advice given by deonnanicole and dlh6213, follow all of that advice. You should definitely [i]not[/i] install SP2 on an infected system; even Microsoft advises against that. | |
Re: You are running an older version of HijackThis; please download the latest version (1.98.2), run it, and post the log here. [QUOTE=Bluedog]I keep getting reports of the same virus in system volume information? I think this is whare my restore points are stored.[/QUOTE] That's correct. The Restore folder is a … | |
Re: Your version of HijackThis is out of date; you should download the newest version (1.98.2), run it, and post the new log. Also, you said: [QUOTE]i have a problem.[/QUOTE] Sooooo..... what is the exact problem? Give us as much info/background as you can. |
The End.