Search found 1878 matches

Actual Results

Post Posted: July 31st, 2012, 12:15 am

Hi wpas, You could try something like this:
Code: [ Select ]
Replace $A$1 with your first "row count" e.g. $A$2 in your example Replace $A$2 with your second "row count" e.g. $A$3 in your example Then you need to put the formula in ...

Post Posted: July 30th, 2012, 11:57 pm

Hi Everybody, It's been quite awhile since I've been here. Unfortunately always pretty busy at work. I'm just wondering if anybody here has any recommendations on a 3rd party firewall for Windows Server 2008. To explain a little further. Windows Firewall by default operates in a mode whereby incomin...

Post Posted: June 10th, 2009, 4:57 pm

To wade in a bit late.. I would check out these further: C:\WINDOWS\BootAccess0\svchost.exe O4 - HKLM\..\Run: [USB_Refresher0] C:\WINDOWS\BootAccess0\svchost.exe That is not the normal location for svchost.exe and the run key is highly suspicious since it doesn't have any relation even to the folder...

Post Posted: September 11th, 2008, 5:30 pm

Hiya, Recently I had a need to determine the run time of a swf file. The obvious way to do this is to get the frame count & frame rate and divide one by the other to get the number of seconds of runtime. Anyway this all looked good, I had a perl script set up to do it etc. However I came across ...

Post Posted: August 22nd, 2008, 6:18 pm

lol yeh seems to be alot of that around there

Post Posted: August 22nd, 2008, 5:34 pm

Your log looks fine. Have you tried scanning with any of the online antivirus scanners? Also what makes you think you have a keylogger?

Post Posted: August 21st, 2008, 7:30 am

Lots of password reset methods out there like grinch says a quick google should give you a few ways.

Post Posted: August 21st, 2008, 4:35 am

Ask your system administrator.

Post Posted: August 21st, 2008, 4:34 am

What was the blue screen error message?

Post Posted: August 20th, 2008, 4:50 pm

A quick glance at your log shows that Bonjour service is no longer on your system. You may need to use LSPFix to fix your LSP. But that would be unlikely to be causing your issue. Both ActiveSmart & Bonjour service have files missing from your log. If they are meant to be isntalled I'd reinstall...

Post Posted: August 20th, 2008, 4:46 pm

Okay a bit more debugging and checking around has given me this. Despite the DNS server being given out as a IP address to the clients they were looking at it as jtg-server.jtg.local when its meant to be jtg-server.smallbusiness.local. Anyway a addition to the hosts file in my system of

Post Posted: August 19th, 2008, 11:00 pm

Hiya, I'm trying to fix up various problems on a Server 2003 SBS domain and have come across this problem of very slow login times. Looking around it appears that its most commonly caused by DNS issues. So as a result I've been having a good hard look at DNS issues. Anyway the domain itself is small...

Post Posted: August 19th, 2008, 10:53 pm

Tried reinstalling Truecrypt?

Post Posted: August 11th, 2008, 11:45 am

Try following the instructions on how to use SDFix here: and post back the log file it creates.
The malware that causes that entry can be fixed by SDFix so it should remove the entry

Post Posted: August 10th, 2008, 4:57 am

Instead of the registry part I'd try using HJT to remove them again. If you do it in safe mode as well there will be less chance of them running, but still check Task Manager as outlined in Mr OBrien's post.

Post Posted: August 9th, 2008, 2:14 am

hmmm I had a similar problem not long ago with my father in law's computer where it wouldn't boot, I opened it up and made sure all the cables were plugged in fully. Tried booting up again and got nothing. Swapped cables around with no luck, put the cables back where they were and it booted up witho...

Post Posted: August 9th, 2008, 1:28 am

Looking good then :) A stress test might work well, or a benchmark test to stress out various parts of the system.. Sysmark?

Post Posted: August 9th, 2008, 12:52 am

Doesn't sound good. Swapping out each component sounds the soundest plan to me though to identify any failed components. Only problem would be if some component has a problem in some obscure part that only appears after sometime if ya get my drift.. Like when there you have 2 sticks of RAM and the s...

Post Posted: August 9th, 2008, 12:15 am

no problem. The main reason I suggested the hard drive is that it has lots of moving parts that would be affected by a fall.

Post Posted: August 8th, 2008, 10:37 pm

Laptop or desktop? From the screen I'd assume a laptop. Have you tried connecting a different monitor to it? Alot of laptops have connections at the back to connect a monitor. You could try swapping the hard drive for another as well, there being no beep codes could just mean that the motherboard is...

Post Posted: August 6th, 2008, 11:54 am

Can also remove this entry as just a bit of house cleaning:
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

Post Posted: August 6th, 2008, 11:53 am

These look to me more like Spybot deleting the files it renamed: O4 - HKCU\..\RunOnce: [SpybotDeletingB5944] command /c del "C:\WINDOWS\wnslvxtf.dll_old" O4 - HKCU\..\RunOnce: [SpybotDeletingD2795] cmd /c del "C:\WINDOWS\wnslvxtf.dll_old" O4 - HKCU\..\RunOnce: [SpybotDeletingB307...

Post Posted: August 6th, 2008, 11:43 am

I'd query these two entries: O4 - HKLM\..\Run: [TrialReset] C:\WINDOWS\fix.exe O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll fix.exe I couldn't find much information on but its a pretty suspicious name & location plus the fact that its running at startup. If you know what it i...

Post Posted: August 1st, 2008, 7:22 pm

hehe well a further look reveals it didn't actually work out how I thought it had, it would still log to /var/log/message as well as the /var/log/socks5. I tried modifying it to !!socks5 *.* /var/log/socks5 !* but that didn't work out either. So deinstalled socks5 and going to edit the Makefile with...

Post Posted: August 1st, 2008, 6:18 pm

A final addition.
I used
*.* /dev/null

which worked perfectly so changed it to log /var/log/socks5 instead since I figure it could be handy to have.
Thanks for your help AnarchY SI :)

Post Posted: August 1st, 2008, 6:04 pm

Looking at syslog.conf, if I add 'socks5.* /dev/null' And then set that as my syslog-facility in the Makefile that should presumably redirect the log to nothing..
*.* /dev/null

Thank you AnarchY SI, I feel I'm on the right track now :)

Post Posted: August 1st, 2008, 5:53 pm

Hmm I get "No manual entry for syslog-facility" but I notice with a google that at least on Linux there is a syslog-facility. It doesn't appear to exist on FreeBSD though as just doing 'syslog-facility' at the prompt returns Command not found. In the ports collection there are two ports wi...

Post Posted: August 1st, 2008, 8:08 am

Most likely the drivers were incorrect or it couldn't find them properly.
You could try this method:

Post Posted: August 1st, 2008, 7:58 am

Hiya, I've installed a test server for myself and have already successfully installed socks5 through the ports collection onto it. Anyway after looking at the /var/log/messages for awhile and seeing how full it was getting with my connecting everything through it I started looking at whether I could...

Post Posted: August 1st, 2008, 5:47 am

Any error messages when you got XP to load the drivers from the disc?

Post Posted: July 31st, 2008, 2:43 pm

snail wrote:
Wow this is weird: I search this page for zero nine(09) and it didn't show: 09 - Extra 'Tools' menuitem...
but I search oh 9 (the letter o) O9 and I see that line selected..
why is it oh instead of zero?

I believe the O actually stands for Other.

Post Posted: July 31st, 2008, 1:12 pm

I like that one SpooF. Gonna haveta remember it. I always enjoy the hacker. Always gives me a laugh, though I prefer it without the commentary. I can't find the hacker... want to share? Certainly. Its relatively long so heres a link to a copy of it: http://www.electric-e...

Post Posted: July 30th, 2008, 8:49 pm

I use thunderbird for my gmail and its set for SSL connections only. Other than that I don't get any spam to it or none that makes it through to thunderbird at least. But its not one that is given to websites, my hotmail one is the designated spam catcher, I think it goes for around 70 spam a day at...

Post Posted: July 30th, 2008, 5:12 am

For FF3 users a simple addon will do it:

Or you can middle click on the homepage button which seems a kludgy way to make things..

edited to add in middle click method

Post Posted: July 30th, 2008, 4:59 am

It needs SATA drivers. That site links to the drivers for the 5220 model. The SATA drivers will need to be put onto a floppy disk and when the XP disk asks if you to press F6 if you need to load 3rd party drivers press F6 and follow a...

Post Posted: July 29th, 2008, 7:42 pm

After you do the fix in HJT you'll still need to delete the files in Windows Explorer itself. HJT only deletes the files that are BHO entries.

Post Posted: July 29th, 2008, 7:25 pm

lol I can't stand coffee myself. I used to drink tea but am frankly too impatient to wait for the kettle to boil and once I get back on the computer I'll get working on something and forget all about it for another hour when I'll realise and have to start all over again.

Post Posted: July 29th, 2008, 10:49 am

I like that one SpooF. Gonna haveta remember it.
I always enjoy the hacker. Always gives me a laugh, though I prefer it without the commentary.

Post Posted: July 29th, 2008, 9:36 am

Apples are better at keeping you awake than caffeine... That is a load of crap. I tried it once, did not work and I was miserable all day. Your probably a caffeine addict though grinch ;) Myself I tend to be up late everynight and up fairly early everyday. Have been like that for the last 11 years ...

Post Posted: July 29th, 2008, 2:39 am

okay for sid2895: Load up Hijack This in safe mode and remove the following items: F2 - REG:system.ini: Shell=Explorer.exe scvhost.exe O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\scvhost.exe O4 - HKCU\..\Run: [WhenUSave] "C:\Pro...

Post Posted: July 28th, 2008, 7:52 pm

Are you sure its booting from the DVD? Might be a good idea to confirm by checking in the BIOS for the boot order.

Post Posted: July 28th, 2008, 9:23 am

Another one that it can be useful to check is Process Explorer from Sysinternals. The main reason behind that is that sometimes a hardware driver causes hardware interrupts to shoot up which causes delays in keyboard and missing letters normally too. In Task Manager Hardware Interrupts is included i...

Post Posted: July 28th, 2008, 6:41 am

If swapping keyboards works and your original keyboard is a wireless keyboard might be an idea to try swapping the battery in it.

Post Posted: July 28th, 2008, 6:39 am

Might want to have a look at this: Seems that System Restore Cleaner is part of QuickClean Though it doesn't provide a solution except basically wipe everything and start again or restore from a backup which frankly I don't conside...

Post Posted: July 28th, 2008, 3:18 am

The log looks clean to me. What makes you think you might have a keylogger?

Post Posted: July 28th, 2008, 2:23 am

Do you use Mcafee software? Specifically the Restore point cleaner? Any registry editing software? Dual boot windows XP & Vista?

Post Posted: July 27th, 2008, 8:37 am

Make sure that in the Control Panel -> Folder Options -> View you have "Show hidden files" checked and "Hide protected operating system files" unchecked. And that you are a member of the Administrators group or start windows explorer with Administrator credentials by right ...

Post Posted: July 27th, 2008, 8:34 am

Try unhooking the CD/DVD Rom drive you installed in it, mainly remove the power connection to it so it doesn't power up. Try powering up then and see what happens. If your system powers up then it is likely that your PSU is failing. If it doesn't boot up then try swapping your HDD cables with the Cd...

Post Posted: July 27th, 2008, 8:28 am

Do a bit of research on client mode wireless. Heres something to get your started on it and give a bit of an explanation of it:

It is probably not a easy process if you are a beginner though.

Post Posted: July 27th, 2008, 8:23 am

Well your log looks clean camtrain.. These can be fixed in HJT but aren't the cause of your problems: O13 - DefaultPrefix: O13 - WWW Prefix: O13 - Home Prefix: O13 - Mosaic Prefix: O13 - FTP Prefix: O13 - Gopher Prefix: As an aside perhaps check what software you are running in comparison to what I ...

Post Posted: July 27th, 2008, 8:12 am

First off have you tried safe mode? If not try it if so and it failed then you need to use the Recovery Console. For it to work you will need their Administrator password if any and a Windows XP disk. Look at this page for instructions on how to start the recovery console and how to use it: http:...

Post Posted: July 27th, 2008, 8:07 am

Swap the SATA cables over too. Try plugging into a different port on the motherboard as well.

Post Posted: July 23rd, 2008, 9:47 pm

I think what you are looking for is a piece of software called nLite. You can check out their website at

Post Posted: July 23rd, 2008, 9:41 pm

Possible for it not to show in the process list - Yes. Possible for it not to be an .exe file - Yes, most likely other format is .com For it not to show in the process list requires rootkit capabilities. This is pretty uncommon in something like a botnet or keylogger. A rootkit detector will find ro...

Post Posted: July 23rd, 2008, 9:15 pm

That HP Logo screen is actually covering the standard BIOS screen that shows you what F key to use to access the BIOS and gives you the opportunity to press it. You can still press the relevant F key while that HP logo screen is showing though. Its hard to predict exactly what it will be since there...

Post Posted: July 17th, 2008, 12:18 am

This is a pretty old topic now, snail. Anyway the main basis of the question was that I had two computers with a modem each but didn't want to have one computer powered on at all times to provide internet for the other without using multiple phone lines. In the end I came to the conclusion it wasn't...

Post Posted: June 15th, 2008, 5:58 am

Semi Solved the issue now :) It was indeed something obvious. I forgot that FTP goes to the users home directory, which none of my AD logins possessed. I've semi solved it by creating the directories by hand since adding this line to /etc/pam.d/vsftpd didn't create the home directory like I expected...

Post Posted: June 14th, 2008, 7:51 pm

Is the LAN provided on the motherboard or is it a extension card? To me it sounds like a faulty connection between the LAN controller/card and the motherboard. Try reseating it if its removable. And your workgroup name is in Start Menu -> Control Panel -> Performance & Maintenance(skip thi...

Post Posted: June 14th, 2008, 11:22 am

Hiya, I've been working on this for about 3 weeks now for part of a project for my studies. Not sure if its really necessary to do it but frankly I'd like to get it working because I feel that is the way the project is meant to be, plus its something I'm interested in learning. I followed this guide...

Post Posted: June 11th, 2008, 5:29 pm

Hiya Hanzi, I'd remove these entries in addition to what Don2007 has posted above. F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe O4 - HKLM\..\Run: [autoload] C:\Documents and Settings\Hannah.HANNIKAN\cftmon.exe O4 - HKCU\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe O4 - HKLM\..\Run: [ntus...

Post Posted: February 19th, 2008, 5:40 pm

hehe I didn't think it was up to the same standard as some of the other photos personally :)
When I saw the topic was the picture that came to mind since it is one of my favorite photos. About the only decent picture I've taken :)

Post Posted: February 18th, 2008, 7:23 pm

I'll slip an entry in for this one I think.


Post Posted: December 21st, 2007, 9:46 am

Hiya, I'm doing a bit of PHP coding these days and have hit a problem with a script for a game website in which people the min & max values used in mt_rand() as both over the MAX_RAND. According to the PHP documentation this shouldn't matter but it does indeed. Presumably because its overloading...

Post Posted: November 22nd, 2007, 8:42 am

I can only see two things in that log which come up bad and they are: O3 - Toolbar: The jokwmp - {459C681F-AA94-49B7-A55B-110D924E5FCE} - C:\WINDOWS\jokwmp.dll O21 - SSODL: rmvgor - {750FF89A-5A47-461A-BAF3-52BD239E2C5B} - C:\WINDOWS\rmvgor.dll Reboot into safe mode and run Hijack This and select th...

Post Posted: November 15th, 2007, 6:09 pm

Did you try removing the two O20 listings in Hijack This?

Other than that you could also try using Process Explorer from

Post Posted: November 14th, 2007, 3:44 pm

I do the same thing as Halen, XP on my machine and Linux in a VM.

Post Posted: November 14th, 2007, 3:37 pm

For cleaning out Nero 7 properly you can try visiting and download the cleantool for Nero 7 and follow the instructions on the page.

Post Posted: November 13th, 2007, 8:15 am

This one here: O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll should be fine. To confirm can you locate it in Windows Explorer and right click on it and select properties. There should be a tab named "Version" if so right cli...

Post Posted: November 12th, 2007, 4:55 pm

Reboot into safe mode and run a virus scan from there. After a bit of a trawl for decent information on it(Virus vendors don't seem to give out the full details on them anymore) I came across this site. If the virus scan still fails attempt...

Post Posted: November 12th, 2007, 4:47 pm

Unknown O20 - AppInit_DLLs: C:\WINDOWS\system32\mmsvbfvbf.dll Any idea what that is? If not, fix it. A google search for it gives 0 results which always makes me a bit more suspicious of it. You might be able to upload it to You could try using a BHO disabler t...

Post Posted: July 29th, 2007, 3:23 am

Can't call up MS and order a replacement one by giving them your key ?

Post Posted: July 22nd, 2007, 8:24 pm

Have you tried checking the hosts file?

Post Posted: July 22nd, 2007, 8:22 pm

Control Panel -> Network Connections -> Right click your Local Area Connection and choose "Status" Check that near the top where it says "Speed" that it is 100Mbps at least.

Post Posted: July 21st, 2007, 5:32 am

Also, there are 28 processes running right now on my computer (I have not opened any programs, I just restarted). Is that a lot or am I on the right track? Check how what Account the processes are running under. There are generally quite alot running under the SYSTEM context. Also remember that eve...

Post Posted: July 21st, 2007, 5:18 am

Or just double click on the .reg file that is created by the Export method. It will ask if you want to incorporate it into the registry and you just click yes.

Post Posted: July 19th, 2007, 4:11 am

It all looks good now. I notice you are running a popup blocker. Could that be the cause of the problem for Housecall? Otherwise not sure why housecall fails. As to weatherbug have you tried emailing them about it not uninstalling ?

Post Posted: July 19th, 2007, 4:05 am

Easiest method definately :)

Post Posted: July 19th, 2007, 3:38 am

lol that was alot of posts. Okay the 1kb cmd file was probably com files come before exe files in the path search. Check your settings in Folder Options as some malware change your settings. The folders in your windows folder are uninstall backups for windows updates. $NtUninstallwmp11$ = W...

Post Posted: July 19th, 2007, 3:31 am

Just move the selected registry key back to My Computer and follow the instructions are you specified.
Or use Windows Backup.
Making a restore point would probably work too.

Post Posted: July 19th, 2007, 3:22 am

1. Download Ubuntu Live CD
2. Burn to CD
3. Boot from CD and delete files.

Post Posted: July 18th, 2007, 10:03 am

You definately don't want to press OK on that run dialog. That is coming from somewhere though, you can still clear what it wants to run and put in msconfig though. Might well be that b.exe. You could try deleting it using one of the methods listed here:

Post Posted: July 18th, 2007, 10:01 am

Turns out there is a security permissions editor for Home. Just isn't a GUI open up a command prompt and type in cacls /? and you will see how to use it. There is a GUI available but it is shareware and costs $10. Don't see the need to spend cash on it when all it is is a front end for the cacls pro...

Post Posted: July 18th, 2007, 9:23 am

In addition to what don2007 mentioned above you need to get rid of these two entries as well: O4 - Global Startup: svchost.exe O16 - DPF: {41F31718-2B9D-4F76-85E2-DD11BBA99F8D} - .EXE I hope you are aware that not everything in a...

Post Posted: July 18th, 2007, 9:07 am

Indeed there is. Set it up manually. Set up the computer with the IP address you want it to have and then set the Default Gateway on all the others to point to that new IP address. I think you also need to set the Primary DNS server, you'll see if thats set already to the old IP anyway then it needs...

Post Posted: July 18th, 2007, 9:06 am

A quick look at the page you posted for it Don2007 makes it look like it'll do the job to me. Odd he compares it to Process Explorer though, I've never heard of Process Explorer being used to delete locked files ;) Test it Matthew and see if that does the trick. Says it works on "Access is Deni...

Post Posted: July 18th, 2007, 8:57 am

The registry option mentioned by ATNO/TW is to clear the pagefile.sys before shutting down windows. If you do not shut down windows it won't clear it. If you have then you should be aware that Windows automatically creates the pagefile.sys and if you have a initial size it will be that size when you...

Post Posted: July 18th, 2007, 8:56 am

I tend not to use Registry Cleaning apps myself since generally its suggested you go over anything they pull up anyway. Just prefer not to in general and don't notice any real trouble caused by it. You could try ClamWin.. There is a bootable version of that that can be burnt to a CD I know.

Post Posted: July 17th, 2007, 5:47 pm

Tried uninstalling and reinstalling the whole Java runtime(I see you did the plugin). What Java VM are you using? Microsoft or Sun?

Post Posted: July 17th, 2007, 5:46 pm

Did you test it? Shouldn't matter. I just removed all permissions on a txt file and could add it into killbox without any trouble. Instead of using its standard file method I told it to delete it on reboot.

Post Posted: July 17th, 2007, 5:33 pm

If you have enough RAM you could try changing the Virtual Memory settings to not be used, delete the relevant Virtual Memory file and then reset the Virtual Memory settings to what they used to be. The filename is pagefile.sys by the way.

Post Posted: July 17th, 2007, 5:24 pm

Set up the router to block outgoing and incoming ports except to specific ports such as Port 80, 143, 110, 25, 23 etc
Each router is different in how you set up port blocking so you will need to check your manual.

Post Posted: July 17th, 2007, 4:13 am

Any programs you have started to use that are built in Java ?

Post Posted: July 17th, 2007, 4:11 am

Can't boot into safe mode either I guess?

Post Posted: July 17th, 2007, 4:09 am

Sounds like Smitfraud. Follow the instructions here: but start at step 4 on the "Automated" Instructions. When your computer h...

Post Posted: July 17th, 2007, 4:08 am

Try downloading Bart's PE or the Ultimate Boot CD and boot off one of them. They run off the CD-ROM and include antivirus utilities etc. With Bart's PE its easy enough to add Hijack This into if it if doesn't already include it.

Post Posted: July 16th, 2007, 7:14 pm

Have you tried safe mode?

Post Posted: July 16th, 2007, 7:12 pm

AVG free is the best free one around.

Post Posted: July 16th, 2007, 7:10 pm

O20 - Winlogon Notify: rpcc - C:\WINDOWS\system32\rpcc.dll For that one you need to remove the file before removing the HJT entry as Winlogon Notify programs run in Safe Mode as well. Follow these instructions to remove it:

Post Posted: July 16th, 2007, 7:04 pm

Perhaps he plans to cross deck the updates to the computers using shared folders and then use psexec to run them?

Post Posted: July 16th, 2007, 7:01 pm

Did you install a update to the Java Runtimes recently?

Post Posted: July 15th, 2007, 7:11 am

Well killbox should do it I think you'll find as it can delete files that are normally in locked by windows.

Post Posted: July 15th, 2007, 6:05 am

Please use method 2 or method 3 on this site to delete this file: C:\WINDOWS\System32\rpcc.dll When you do so reboot into Safe mode instead of letting it boot into normal mode and remove the following entries using Hijack This: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://...

Post Posted: July 15th, 2007, 5:52 am

1. Remove the kaspersky service using Hijack This
2. Check event viewer for errors about the registry
3. Do a scandisk of your D Partition, or is D your CD-ROM ? it shows as being your Hard Disk in that message you posted.

Post Posted: July 15th, 2007, 5:50 am

lol scientology in defragging.. I use O&O myself. I'm not a massive defragger though and I noticed it didn't like when I queued up 6 drives to get defragged, 2 at a time. It would freeze at some point in the night and not be doing anything.

Post Posted: July 15th, 2007, 5:47 am

Yeh most which are 802.11g are backwards compatible with 802.11b and 802.11. Those all run on the same frequency.

Post Posted: July 15th, 2007, 5:45 am

Or turn off Simple File Sharing and take ownership.. Done it several times myself. Other than that killbox can probably do it.. Might be another trick that you can do which is probably a bit too much work for something like this :) Does your antivirus run as SYSTEM if you check task manager ? Thats ...

Post Posted: July 15th, 2007, 5:43 am

It looks like your Antivirus Antivir should be able to handle it. Make sure its fully updated and run a scan at least on \Windows if not your whole drive. Warn your friends on MSN about it as well because it'll have tried sending it to all of them as well If Antivir doesn't try using one or more of ...

Post Posted: July 14th, 2007, 8:43 am

Funnily enough I recall reading something like that when Windows XP first came out myself. You may find this post interesting though as about half way down people are discussing this and several people recall reading something like that:

Post Posted: July 14th, 2007, 8:37 am

Setting QoS is in different locations on different routers if they even support it. Generally most aren't particularly flexible. Like mine will allow me to QoS certain types of data such as VOIP etc but not actually configure a certain port to have a greater QoS value. Grinch's method is the easiest...

Post Posted: July 13th, 2007, 6:15 am

You could try opening up a command prompt and using net start <service name> This might give you a more informative error message though I'm not hopeful as I suspect it will just give a generic "The service could not be started" You can find the service name in the properties of the ...

Post Posted: July 13th, 2007, 6:06 am

Can you set the QoS for certain types/ports? If so you could reduce the QoS Priority for his bit torrent data so other data has a higher priority.

Post Posted: July 13th, 2007, 6:04 am

Presumably its connected through Ethernet. I can't see that you would need to make any adjustments as the PS3 should get the IP address and other settings through DHCP. Might need to restart the PS3 just to speed up the process. Not sure how often a device without a IP address sends DHCP requests.

Post Posted: July 12th, 2007, 4:07 am

Can you post a fresh log if you ran Spybot since the previous log please?
That way we don't give you a long list of things to remove that are already gone.

Post Posted: July 12th, 2007, 4:06 am

they can see the routers ( the router can see the 2 wired pc as well as the wireless psp in its list of connections the pc's can see the modem ( Why are they on separate IP networks? Did you set it up this way so the wireless devices would connect through the Wireless on 1...

Post Posted: July 12th, 2007, 3:59 am

Thats fine, I've noticed that myself sometimes that items are in capitals. You see it with notepad.exe at times too where its NOTEPAD.EXE.
I have also seen this behavior for Explorer.exe. My last installation did it, for some reason this one doesn't.

Post Posted: July 10th, 2007, 2:14 am

That truly is bizarre casablanca. Just tried it out on mine and indeed the file names disappeared though it didn't open in a fresh window for me.
I wonder why that is. Presumably its not a feature.. Though of course all bugs are undocumented features ;)

Post Posted: July 9th, 2007, 8:33 pm

What commands are you putting in?
Try this:

Post Posted: July 9th, 2007, 8:29 pm

The problem I personally find with alot of consumer routers is that they lack major configurability. Personally I run a firewall as well as my router. The firewall uses about 10Mb of RAM and from observing my Processes list for a few minutes pretty well 0% of my CPU. By the way the term is Defense i...

Post Posted: July 9th, 2007, 8:23 pm

Have you tried booting into safe mode?

Post Posted: July 8th, 2007, 7:47 am

Try uninstalling them in Device Manager and then reinstalling them using the drivers you downloaded.

Post Posted: July 8th, 2007, 7:44 am

The .bkf file is the backup that is created. I should know until just the other night I had 15 Gb of them sitting doing nothing.

If your nervous about it why not just do a straight out copy of them or archive them with WinZip/WinAce/WinRar/7Zip instead of using MS Backup ?

Post Posted: July 7th, 2007, 3:28 am

Have you checked the WIA support in Import to see if that will pull an image from the scanner? I had a scanner awhile back that worked through WIA. My scanner now adds a option into the Import menu to use the scanner.

Post Posted: July 7th, 2007, 3:23 am

I started making regular backups when I suspected a HDD might have been failing and do not recall anything about catalogues. The backups themselves are .bkf files. I'm pretty sure there are no catalogues that are required to make use of the backups otherwise there would be no point to them because i...

Post Posted: July 7th, 2007, 12:58 am

Did you install the software for the scanner as well as the drivers?

Post Posted: July 7th, 2007, 12:45 am

A FTP Client is a application on your Computer that connects to FTP Servers(sites). The FTP server is on another computer and the Client is on your computer.
You may want to read through this:

Post Posted: July 7th, 2007, 12:41 am

It is dangerous.

Multiple names associated with it and if its part of ICQ it would be well documented and a quick google search would find it easily on numerous Hijack This logs whereas not a single one has the same dll name as you do.

Sorry should have made my post more explicit :)

Post Posted: July 7th, 2007, 12:39 am

Unfortunately the answer to the last two questions is no and with XLView I'm not sure but I consider it unlikely that you can use VBA with it. I saw where you said you had XL Viewer but thought you were going to get a full Excel to do it with. Access VBA & Word VBA are both different unfortunate...

Post Posted: July 5th, 2007, 6:55 am

Okay ran this with a test file and it looked to work fine. [code] Dim Record(24) As String Dim LoopCount As Integer Dim Filename as String Filename = InputBox("Please type in the full path and name to the csv file. eg C:\test.csv") If Len(FileName) > ...

Post Posted: July 5th, 2007, 6:39 am

Also this one:
O23 DomainService - - C:\WINDOWS\system32\wbvwwhcp.exe

Post Posted: July 5th, 2007, 6:34 am

lol good I'm glad it was somethin easy :)
Reason I hate the hardware interrupts problem is it can be caused by any piece of hardware and yet there is no way that I can find to check what piece of hardware is sending the interrupts. If anyone knows a program it would be very useful.

Post Posted: July 5th, 2007, 6:32 am

Hmm Could you please tell me where you found out that service.exe is a part of mIRC? I'm rather suspicious for a few reasons.. Unless mIRC has changed alot since the last version I downloaded its always been a very compact package that sticks to its own directory rather than spreading out as you ind...

Post Posted: July 5th, 2007, 6:15 am

Nothing comes up on a google search. I'll bet if it really was part of ICQ it would be fairly well documented. Plus the Dll name is not descriptive. Finally a search for forkonce gave me this as one of the first hits: Run: [] rundll32.exe" C:\WINDOWS\system32\gtjjxarg.dll",forkonce

Post Posted: July 5th, 2007, 6:09 am

Don't need the fields anyway. Just the number of fields and what sort of data they are holding and you provided that.
Up the top right hand side of your post is the "Edit" button. I'd suggest editing all the names etc out.

I'll work up a macro in a moment.

Post Posted: July 4th, 2007, 6:12 pm

I downloaded some server logs recently in .csv format and they opened just fine in Excel. File -> Open Use the drop down list to select csv files and go for it. Otherwise using Excel's Import should work. That works for one file or if you are happy doing it manually. Otherwise you can always writ...

Post Posted: July 1st, 2007, 9:18 am

Do you have a firewall installed that you can check the event log of?
If not you can type in netstat into a command prompt window to see the current connections.

Post Posted: July 1st, 2007, 9:01 am

Are you running anything like bit torrent?

Post Posted: July 1st, 2007, 9:00 am

Its good you mentioned that your computer is in spanish and told us the Program Files directories etc as in the past I have noticed that can produce some confusion. Anyway on to the log itself The following items can be removed in safe mode with Hijack this: R1 - HKCU\Software\Microsoft\Internet Exp...

Post Posted: July 1st, 2007, 8:42 am

ahh you have one of the most annoying problems to work out. I worked on a similar problem for months until I finally got it all figured out. First thing to do is make sure all your hardware is installed correctly. Update all drivers as well. If that doesn't help you could try disabling non essential...

Post Posted: July 1st, 2007, 8:38 am

Can you please just follow the instructions in this post to create a plain HJT log instead of a 'comparison one'?

Post Posted: July 1st, 2007, 8:36 am

Your logfile is clean. The dll file you mentioned is part of Windows Auto Update. You could try disabling Auto Update before starting any online games and restarting it afterwards. If you choose not to restart it make sure you visit MS Update regularly. Are you using the latest version of the Window...

Post Posted: July 1st, 2007, 8:28 am

When you say log off do you mean it returns to the Welcome Screen after the screen saver becomes active? If so its in the display properties under Screen Saver.

Post Posted: July 1st, 2007, 8:17 am

You need to remove these entries in Hijack This in safe mode as well: R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = R3 - URLSearchHook: Rediff Toolbar - {12F02779-6D88-4958-8AD3-83C12D86ADC7} - (no file) O3 - Toolbar: Re...

Post Posted: July 1st, 2007, 8:05 am

Sorry it took awhile to get to your post.
Please read the instructions here: and post a Hijack This log.

Post Posted: July 1st, 2007, 8:03 am

Here are the only things found in that log: R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) Reboot into safe mode and run Hijack This and remove the entrie...

Post Posted: July 1st, 2007, 7:52 am

Sorry it has taken awhile to get back to you regarding this. There were only two bad things I found in your log which were: O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\UpMedia\ContentTool.dll O2 - BHO: XBTP01621 - {9EDB89EF-E4BC-4c70-B102-8F7A4365EE33} - C:\PROGRA~1\...

Post Posted: June 20th, 2007, 8:29 am

I cannot see anything in your log that is nasty. Have you tried disabling StyleXP or putting it back to the original style just to see if that might be affecting things at all? Hard to see that it would as when I used it I didn't notice any real effect on speed but worth a look.

Post Posted: June 20th, 2007, 8:25 am

lol was my first reaction to seeing that info in the log. I suspect something different though in how it got there. I suspect a trojan/virus creator used geocities to host the hosts to block so he could update it regularly and so keep an up to date list as opposed to a out of date list. Hence when i...

Post Posted: June 20th, 2007, 8:20 am

Exactly as Don says. As I demonstrated above every FTP client is different in how you set these settings. I had one awhile back where it was in the Proxy settings of all places that you had to set PASV or PORT. Never figured out why they put it there.

Post Posted: June 20th, 2007, 8:10 am

What anticheat system does it use?

Post Posted: June 19th, 2007, 1:00 am

It depends on what FTP client you are using. For example. In globalscape CuteFTP its right click on the site in Site Manager Click Properties Open the Type tab. Change Data Connection Type to PORT. For every client its different. Try using your clients help file and do a search for PASV or PORT. If ...

Post Posted: June 18th, 2007, 7:16 pm

As I mentioned above DirectX 9.0L is the latest DirectX 9 for Vista. Ignore the google search responses that are blabbin on about DX9L being DX10 for XP. That is completely incorrect. Did you try running the game in compatibility ...

Post Posted: June 18th, 2007, 7:05 pm

Its on your XP CD. Easiest way if you havent' already installed it is to use the method there where you boot up with your XP CD in the CD drive and use the steps listed to enter the recovery console. Use the Windows Setup floppy disks or the Windows CD-ROM to start your computer. At the "Welcom...

Post Posted: June 18th, 2007, 6:37 pm

Remove the following entries using HJT in safe mode. R3 - URLSearchHook: (no name) - {F4243D2A-A5CA-AA39-CB4B-8CBAA34D1CE5} - (no file) O2 - BHO: (no name) - {DEBEB52F-CFA6-4647-971F-3EDB75B63AFA} - C:\WINDOWS\system32\tmp4.tmp.dll O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\pmljgd.dll&q...

Post Posted: June 18th, 2007, 6:28 pm

Try searching symantec's website regarding the norton uninstall issue. Before you remove Norton though make sure you have another AV software ready to install and to be on the safe side I'd suggest disconnecting from the internet while you uninstall norton and install your new AV. And yes I have to ...

Post Posted: June 18th, 2007, 6:09 pm

Hmm unfortunately thats the limit of my knowledge of Virtual PC as the only times I've used it is in class twice. I personally prefer VMWare. What about bridging/NAT etc? Does the VPC actually have access to the network in the correct way? What happens when you use pings? How about the network adapt...

Post Posted: June 17th, 2007, 5:49 am

My own searching brings up zip for this. Various people are saying that there is a different version of 9.0c for Vista because the standard 9.0c doesn't work. Apparently called 9L or 9Ex. I found only one site that mentioned third party tools that can remove it but they never mentioned what tools yo...

Post Posted: June 17th, 2007, 5:41 am

Gone! Must have been removed by something else :)

Post Posted: June 17th, 2007, 5:38 am

Don't know much about the Vista tool. I would presume the standard warnings apply to it "Backup before you do anything with this tool". You may find this link useful: Can probably be adapted fairly easil...

Post Posted: June 17th, 2007, 5:35 am

Ahh it should be Windows
Then CurrentVersion
Then Run

Post Posted: June 17th, 2007, 5:34 am

Does your computer have a image that appears prior to the boot menu? Some manufacturers place a image in the location where it is. Normally pressing Esc will get rid of the image so you can see the boot up. The location when it happens is as its testing your RAM at the very start of the boot up sequ...

Post Posted: June 17th, 2007, 5:32 am

Really? odd. I get a full realty page :)
Nice design at least on the front page, who knows what the rest looks like but looks like a pretty nice design :)
I tried IE7 last week and IE6 when I removed IE7 again and both worked for me.

Post Posted: June 17th, 2007, 5:31 am

hehe windows has some quirks in the way of Capitalisation. For example I've noticed that rundll32.exe seems to usually run all caps as RUNDLL32.exe. Beats me why exactly. But if you type in "C:\windows\system32\NOTEPAD.exe" into the run box you'll get notepad exactly the same as if you typ...

Post Posted: June 16th, 2007, 5:08 am

When you install a program generally there are two options "Typical" or "Custom" If you choose the custom installation option you can adjust where to install to in most cases.

Post Posted: June 16th, 2007, 5:07 am

Control Panel -> System -> Advanced -> Performance Settings -> Advanced and down the bottom you'll find the Paging File along with a button named "Change"

Post Posted: June 16th, 2007, 5:06 am

When you open regedit you'll notice it looks like windows explorer.
On the left hand pane click on HKEY_LOCAL_MACHINE(thats the HKLM) then Software etc through Don2007's instructions.

Post Posted: June 16th, 2007, 5:04 am

Windows unlike Linux does not differentiate between capitalisation of file/folder names. These ones: O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-413...

Post Posted: June 16th, 2007, 4:55 am

You need to remove this one in HJT:
O4 - HKLM\..\Run: [Microsoft] winsys32.exe
Reboot and delete the file:

Post Posted: June 16th, 2007, 4:50 am

Check in the event viewer for the exact error that is occurring when you shutdown. Control Panel -> Switch to Classic View(if not already in Classic View) -> Administrative Tools -> Event Viewer -> System And for the Homepage if you are comfortable in the registry try changing this value...

Post Posted: June 16th, 2007, 4:47 am

The I think is safe. Part of some realty software.
The MLS System is the premiere web application that helps Realtors get the most out of their business.

Visiting the site with IE(won't allow FireFox) brings up a prompt for a login & password.

Post Posted: June 16th, 2007, 4:31 am

When you first start the computer you'll see it says "Press Del to enter Setup" or something similar. Press whatever key it tells you to. When you go to exit you can use "Exit Saving Changes" to save the changes you made(don't adjust anything except disabling the onboard sound)

Post Posted: June 16th, 2007, 4:30 am

I think we've moved a bit off topic here. If you think its norton that is causing the trouble don2007 why don't you just suggest Disabling it and seeing if the network works then? Much simpler than going through the registry and removing every trace of norton. And the services, and any dll files in ...

Post Posted: June 16th, 2007, 4:25 am

Have a look in your windows 2000 Windows folder and see if there is a backup of boot.ini there. Might be called boot.bak or something similar. To get both working you will have to combine the [operating systems] section together and place the edited copy in the C: drive. Otherwise if no backup is fo...

Post Posted: June 16th, 2007, 4:20 am

I would presume from it being a laptop and that it has a recovery partition that its from someone like HP, Lenovo, Acer etc and that it came with a "Recovery Cd" or a boot option to recover from the recovery partition.

Post Posted: June 16th, 2007, 3:59 am

Why not just use a LiveCD like Bart's PE or a linux Live CD? Of if you reboot into the Recovery Console you can see if the following commands work: cd system32 cd dllcache copy svchost.exe ../svchost.exe If that last command brings up any errors then it hasn't copied the file. I think it should copy...

Post Posted: June 16th, 2007, 3:55 am

hehe got awhile before I catch the other high posters :)

Post Posted: June 16th, 2007, 3:54 am

For VPC to host you need the Microsoft Loopback NIC installed don't you? Do you need a certain NIC installed for VPC - VPC network communications?

Post Posted: June 14th, 2007, 7:37 am

Does your nic show up in device manager?

Post Posted: June 14th, 2007, 7:33 am

Nothing I noticed in your log. About the 3 files you mentioned. For kernel32.dll and winsock.dll check the Properties -> Version Tab -> Company and see if they are Microsoft Corporation. Can't find anything on this one: andwsock32.dll You can submit it to Now that tha...

Post Posted: June 14th, 2007, 7:27 am

Possibly a faulty slot then?

Post Posted: June 14th, 2007, 7:26 am

What ways have you used to try changing it? Hijack This removal from the looks of your latest posts. Before that?

Post Posted: June 14th, 2007, 7:17 am

You could try using bootcfg /rebuild Then if that fails fixboot and if all else fails fixmbr To dual boot 98 and XP/2000/2003 etc the way they advise you to do it is install 98. Install XP. You could try a repair installation. If you have access to VMWare or any virtual machine software I would use ...

Post Posted: June 14th, 2007, 7:08 am

To remove the winlogon files mentioned above by Bogey you will need to use killbox to delete the files before removing them using Hijack This. You should also remove these BHO's O2 - BHO: (no name) - {1D9CA3EF-3768-4070-BA34-2BA91BC1BFF1} - C:\WINDOWS\system32\afcxxskn.dll O2 - BHO: (no name) - {47F...

Post Posted: June 14th, 2007, 6:59 am

You can also disable it in the BIOS. Onboard Sound.

Post Posted: June 13th, 2007, 6:37 pm

Are you running any programs that integrate with the Vista shell? Like to use the example for Zip Genius. It integrates with the shell so they can right click on a file and select to compress it with Zip Genius. Are you running anything that gives you something more than the standard options that ap...

Post Posted: June 13th, 2007, 5:17 pm

hehe in your flash drives check for a file named autorun.inf. If you find it right click on it and select edit. Look for RUNDLL64.DLL.VBS. If its in the autorun.inf file, delete the autorun.inf file and check for rundll64.dll.vbs on the flash drive.

Post Posted: June 13th, 2007, 5:16 pm

One other thing that is more a problem regarding traffic. If you are using Windows SP2 your connection is limited to 10 half open connections. This was done my Microsoft to stop people from using XP as a server. What does this mean? When a computer requests a connection to your computer it sends a S...

Post Posted: June 12th, 2007, 5:49 am

That's insane.. Love it. Pirates are annoying us. So let's crack down on all the people who are honest, cause of course we expect that pirates will activate in the normal way too! Reminds me of a bit in a book written by a jewel thief on how hes always amazed when he sees people with big thick doors...

Post Posted: June 12th, 2007, 5:02 am

Regarding your copy error. There is a simple reason why that didn't work and that is that with the XP recovery console they do not allow you to do things outside the windows directory. Ridiculous and insane yes. Anyway I've read that if you can get your mitts on a Windows 2000 CD you can use its rec...

Post Posted: June 12th, 2007, 4:59 am

Have you tried a chkdsk in recovery console?

Post Posted: June 12th, 2007, 4:58 am

I would have thought you'd only need to do the activation over the internet if you reformatted. Surely the new computer is now the base hardware setup so a phone call would only be necessary if you substantially changed the hardware in the new computer?

Post Posted: June 12th, 2007, 4:56 am

As I understand dual booting 98 with a NT family O/S you need to have the C drive formatted as FAT32.

Post Posted: June 11th, 2007, 6:21 pm

Thats an idea, except alot run as services now and I don't relish the idea of explaining what services to disable(then probably them disabling the wrong thing) and reenable later. Officially we don't provide support for any AV/Firewall software. For example if someone calls up and tells me they can'...

Post Posted: June 11th, 2007, 5:16 am

Hmm try changing the filename for Hijack This from HiJackThis_v2.exe to something different like fhdlsa.exe. Some programs hide themselves from Hijack This and that stops them. Also try using one or more of these online virus scans. I would use several as quite often there is a gap in each ones cove...

Post Posted: June 10th, 2007, 7:32 pm

Hiya everyone, I've come across the problem where when helping people over the phone its very hard to find the right information on how to disable antivirus and firewall software. Can people please have a look at what ones have been posted and if the software they are running hasn't been posted yet ...

Post Posted: June 10th, 2007, 7:29 pm

Remove this in Hijack This: O2 - BHO: (no name) - {B8C5186E-EC37-4889-9C2E-F73649FFB7BB} - C:\Program Files\Video ActiveX Access\iesplg.dll This is the directory all the exe & dll files are in: C:\Program Files\Video ActiveX Access And do you know what this is? C:\Program Files\TRACTION In-Game ...

Post Posted: June 10th, 2007, 7:22 pm

And how was it resolved?
By the way RAM is cleared everytime you restart your computer. So if you removed what was creating the ram disk it would no longer be there.

Post Posted: June 10th, 2007, 9:39 am

You might have some success with the System Volume Information & Recycler using some of the online virus scanners. Both of the folders are part of XP but normally antivirus scanners can scan into them. Try using one or more of these online virus scans. I would use several as quite often there is...

Post Posted: June 10th, 2007, 9:23 am

The software on the Floppy disk is what is creating the ram drive. As to the not being able to boot check what your boot order is set to in the BIOS. Normally it should be floppy -> CD-ROM -> HDD0(Hard Drive, Primary Hard Drive etc). If you have the floppy disk in the drive it will not boot fr...

Post Posted: June 10th, 2007, 9:18 am

Heres a short and succint guide to doing it. It doesn't have pictures though but looks fairly simple to me to follow. Lots of other possible guides too:

Post Posted: June 10th, 2007, 9:13 am

You should also remove this one in Hijack This: O4 - HKLM\..\Run: [SVCHOST] C:\WINDOWS\MDM.EXE Reboot into safe mode to fix the Hijack this entry mentioned by casablanca and the one I've mentioned. Then find and delete the files: C:\WINDOWS\system32\SVICHOSSST.exe C:\WINDOWS\MDM.EXE C:\WINDOWS\SVCHO...

Post Posted: June 10th, 2007, 9:06 am

If you only have a laptop the enclosure is indeed the only possible solution. Regarding the 2 boot sectors as far as I'm aware it should not be a problem, can't remember the last time I did it but sure I've done it before(will be doing it tomorrow in fact on my father in law's computer. The BIOS loo...

Post Posted: June 10th, 2007, 9:01 am

Did you use the CD-COPY feature of Roxio? Another trick you can do would be something I did awhile back when I had a scratched disc but had copied the files to the hard drive earlier to make a Bart's PE disc. Make a fresh rip using a iso making program. Replace the damaged files with your backup one...

Post Posted: June 10th, 2007, 8:58 am

Also get the caps lock key on your keyboard fixed :)
Other than the above mentioned by don2007 are you running antivirus?

Post Posted: June 10th, 2007, 8:49 am

Checked the above links?
Follow the instructions in this post:

Post Posted: June 10th, 2007, 8:45 am

Okay the log file is clean. The IE "WElcome to VB" or whatever it says is easy enough to fix. Check out this for how to change it: As for the programs button in the start menu. Do you mean the "All Programs" in the new view or &q...

Post Posted: June 6th, 2007, 7:10 am

This might help you:,1697,2068721,00.asp
I think Home Premium might be the better option over Home Basic. And the Ultimate version just has everything :)

Post Posted: June 5th, 2007, 10:06 pm

Okay the file mentioned by grinch is on both computers. On your desktop you also have these two entries which are not on your desktop. Check them out and if they aren't your DNS server addresses for your laptop remove them. O17 - HKLM\System\CCS\Services\Tcpip\..\{0322DA9B-D27B-498B-AFFB-DA1154D5E21...

Post Posted: June 5th, 2007, 9:53 pm

Reboot into safe mode and run Hijack This. Select the following entries for removal: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://localhost/ F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\eksplorasi.exe" O4 - HKLM\..\Run: [VVSN] C:\Program Files\VVSN\VVSN.ex...

Post Posted: June 5th, 2007, 9:12 pm

Reboot into safe mode. Run Hijack This Select the above mentioned hosts entries. Also select these ones for removal as well: O4 - HKLM\..\Run: [MSConfigs] C:\WINDOWS\RUNDLL64.dll.vbs O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)...

Post Posted: June 5th, 2007, 8:44 pm

If you have an External USB enclosure sure you can use it. But not everyone has one whereas everyone has the capability of installing a HDD as a slave(even if they have to unplug a CD/DVD-ROM drive to do it).

Either way you still need a second computer to access.

Post Posted: June 5th, 2007, 10:06 am

Okay reboot into safe mode and remove these two entries: F2 - REG:system.ini: Shell=Explorer.exe SSVICHOSST.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 Then find and delete C:\WINDOWS\system32\SSVICHOSST.exe C:\WINDOWS\SSVICHOSST.exe I don't know if you ...

Post Posted: June 5th, 2007, 10:00 am

Okay I thought it was just a one time backup you were planning. Okay. What was the Socket Error that Handy Backup gave you?
Heres another backup program btw

Post Posted: June 5th, 2007, 12:53 am

Why not just zip/ace/rar or don't compress the files and just upload them with a FTP client?

Post Posted: June 5th, 2007, 12:52 am

Check out this and see if it works for you:

Post Posted: June 5th, 2007, 12:49 am

If you only just reformatted if you should stop using it immediately. Use another computer to download a data recovery program. Remove the hard drive from the formatted computer. Install it as a slave in the second computer. Run the data recovery software on it and point it at the hard drive and if ...

Post Posted: June 5th, 2007, 12:42 am

Ahh yep quite right thats part of Netware the Winsock LSP file. Anyway your log looks nice and clean now. I'd try the above reinstall or repair IE to get IE working. Can you boot up normally now by the way? Also can you run Spybot Search & Destroy, don't remove the stuff it says but can you repo...

Post Posted: June 4th, 2007, 9:06 am

Looks clean to me.

Post Posted: June 4th, 2007, 8:57 am

Not sure regarding the Norton issue. Best bet there might be to email Symantec regarding it. They have a 48 hour turn around time on emails but they are free. Otherwise there is live chat which I think was 1 hour or something, or you could try uninstalling and reinstalling Norton. Anyway regarding t...

Post Posted: June 4th, 2007, 8:46 am

Thats the one grinch :) Thanks, couldn't be bothered to try to figure out the right search query to return the term I wanted :)

Post Posted: June 2nd, 2007, 6:35 pm msmsgs.exe is the one that installs with windows. The full MSN messenger is MsnMsgr.exe Please change the name of HiJackThis_v2.exe to something different like gdsa.exe and post a fresh log. That one shows as clean ...

Post Posted: June 2nd, 2007, 6:28 pm

Can you please check the event viewer in Start -> Control Panel -> Administrative Tools for any errors when you are attempting to startup your computer normally.

Post Posted: June 2nd, 2007, 6:27 pm

Follow the steps in this post:

Post Posted: June 2nd, 2007, 6:24 pm

Reboot into safe mode and check out Event Viewer for any new errors.
Is your computer useable? From the first part of your last post I figured it wasn't, but the second part made it look like it was..
Check out Event Viewer see if there are any errors happening when its frozen.

Post Posted: June 2nd, 2007, 6:22 pm

Hmm the changing the RAM slots. One of two possibilities for that: 1. If you have RAM installed in the 1st and 3rd or 2nd and 4th RAM slots they should be exactly the same as that is for.. Well I forget the name of it now but I remember someone last year had a problem with the same thing. 2. If ther...

Post Posted: June 2nd, 2007, 6:18 pm

You aren't running any Antivirus or firewall software I notice though. Be a good idea to remedy that if you are concerned about catching stuff from the Net.

Post Posted: June 2nd, 2007, 6:15 pm

That appears to be related to CLSID seems to be related to "My Computer" as I find alot of posts when searching on adding things to "right click my computer". You could check out this key in regedit: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}...

Post Posted: June 2nd, 2007, 6:09 pm

To use Word to save it as a pdf I think you need the plugin which comes with Adobe Acrobat(Full not reader). Just checked Word 2007 and its not in the save as dialog, I haven't installed Acrobat yet though but remember seeing the option in the past when I've had both Acrobat & Word installed.

Post Posted: May 29th, 2007, 12:14 am

Okay well I'll take a stab at this one. For the server it very much depends on what O/s you are planning on running. Server 2003 or Linux? Linux requirements if you run it in console mode are very low really. In fact Bigwebmaster has a great guide on his website regarding linux server requirements. ...

Post Posted: May 28th, 2007, 11:35 pm

How come Bogey?

Post Posted: May 28th, 2007, 6:56 pm

As far as I can see its most likely a DNS server of the telephone company that is causing the trouble. Try calling them and get them to clear the entry for your old site from the DNS server(or flush the whole cache on it) Usually it takes a little time for changes to domain names to propogate fully ...

Post Posted: May 28th, 2007, 6:54 pm

For the XP Net Diag stuff, just fix it in Hijack This.
Rundll32.exe is fine.

Looks clean to me.
Tried Spyboy and Adaware?

Post Posted: May 28th, 2007, 6:50 pm

I think he is meaning services.exe judging from the error message.
Please check the event viewer under Control Panel -> Administrative Tools -> Event Viewer for more information on the error message.

And ALCMTR.EXE is part of RealTek audio drivers.

Post Posted: May 28th, 2007, 6:46 pm

I noticed in another forum someone mentioning that some wierd errors can be caused if your MS runtimes are stuffed, like .NET runtimes, VB runtimes etc.

Post Posted: May 28th, 2007, 6:43 pm

Did you test Direct Sound bogey?
You can set your default device for stuff using "Sounds and Audio Devices" in Control Panel.

Post Posted: May 28th, 2007, 6:33 pm

Apart from what bogey this is te only thing: O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\htuqdbdy.dll",realset If you remove it in safe mode then delete the file C:\windows\system32\htuqdbdy.dll it should be got rid of fairly easily. By the way I see you also fixed up the N...

Post Posted: May 28th, 2007, 6:23 pm

Nope that would be a vbscript I would say. Okay StyleXP I know would do it and I have used it in the past and done the welcome screen changes and it did them well, I didn't notice any speed issues with it either. Lots of styles to choose from etc. TGTSoft is the company that makes it, I think their ...

Post Posted: May 27th, 2007, 2:23 am

Well having networked two computers together using a crossover cable I can say that the gateway for one machine will be the other machine and that computer will not have a default gateway. A default gateway is for anything that is not addressed to a computer within the same network, hence if you hav...

Post Posted: May 27th, 2007, 2:12 am

You need something like Windows Blinds(not sure if this does it or not) or StyleXP(this can definately do it).

Post Posted: May 24th, 2007, 8:33 pm

Make sure everything is installed properly?
Check your RAM is seated properly as I see two were directly related to Page Faults and the third quite possibly as well.

Post Posted: May 24th, 2007, 8:30 pm

Your log is indeed clean the only thing you can get rid of that runs off winlogon is this: O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing) Its not there anymore so its not necessary.. Regarding the time issue.. Doing a search on it reveals that software can cause this issue, you might ...

Post Posted: May 24th, 2007, 8:18 pm

Hmm well the log is clean now, did you try any of the online antivirus scanners? By the way regarding the analyzer in the stickied topic. That is/was a good analyzer but their new 'Fuzzy Algorithm Check' makes no sense to me cause I find it tags things as bad that are good and things that are good a...

Post Posted: May 24th, 2007, 8:02 am

Reboot into safe mode, run Hijack This and fix the following entries: O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\ovcqrnwr.dll",realset O4 - HKCU\..\Run: [Hqtrc] "C:\Documents and Settings\Thomas Luvan\My Documents\W?nSxS\?erinit.exe" O4 - HKCU\..\Run: [Pqlm] C:\W...

Post Posted: May 24th, 2007, 6:35 am

Hehe in my defence I do actually look things up in them :)

Post Posted: May 24th, 2007, 6:33 am

Setpoint.exe is part of Logitech's mouse software or keyboard software. One or the other, mouse I'm fairly sure. Msnmngr.exe is a MSN Messenger, comes with windows.

Other than the missing files Bogey mentioned your log is clean.

Post Posted: May 24th, 2007, 6:31 am

If you do another scan (presuming you've restarted since that last scan) you should find that those have gone, from what I could gather they are legit stuff. not much info around on them though. Alot of people with them in HJT logs. Ahh thats where I saw it as part of a server. Do a search on nlite....

Post Posted: May 24th, 2007, 6:24 am

This also does not belong:
O4 - Global Startup: svchost.exe

Post Posted: May 24th, 2007, 6:21 am

lol I've got emails from 6 years ago.. 2001 :)

Basically for the same reason as ATNO/TW says. Easier for me to just copy them lock stock and barrel than work my way through them to see whats worthwhile and whats not.

Post Posted: May 22nd, 2007, 7:08 pm

Were these the entries you weren't sure of? O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [IE7-11...

Post Posted: May 22nd, 2007, 7:02 pm

Hmm I can't see why you could not log in after removing the files I mentioned. I just went through and checked them again and they are all bad. It concerns me that that happened when removing them. Here is what I would suggest. You still have the backup of your system I presume. try removing the fil...

Post Posted: May 22nd, 2007, 6:59 pm

It is used to run a dll as a application if I remember rightly. When they say if its not in system32 they mean that the microsoft version of rundll32.exe runs from Windows\system32 or Winnt\system32 but for example if you had one that you found in just Windows or C:\ then it is likely a virus. In th...
  • Sort by

© 1998-2016. Ozzu® is a registered trademark of Unmelted, LLC.