Specialty Forums
Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home

General Forums
Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2

Drivers
Driver Scan
Driver Forum

Software
Automatic Updates

BIOS Updates

My Computing.Net

Solution Center

Free IT eBook

Howtos

Site Search

Message Find

RSS Feeds

Install Guides

Data Recovery

About

Home
Reply to Message Icon Go to Main Page Icon

Subject: Computer Virus Trouble ??

Original Message
Name: CkDarrow
Date: October 1, 2007 at 06:48:06 Pacific
Subject: Computer Virus Trouble ??
OS: Windows XP Media Center E
CPU/Ram: Pentium 4 CPU 3.00GHz 2.9
Model/Manufacturer: Dell Dimension E510
Comment:
Ok..here is some back log as to what is going on.

I believe that one of those false "greeting card" emails was opened by my daughter accidently as my sister in-law is always sending legit ones.

We have started having trouble/ not being able to log into sites. ie: will pull up yahoo or ebay (other sites also) and when I click to log in the page that pops up is "the page cannot be displayed...the page you are looking for...."

Do I need to completely reformat or is there something else that can be done?? The guy at my local computer said that it sounds like I have been highjacked and need to reformat.

I did download and run avast...it came up with

system volume information\_restore....... (I can type it all if needed)

is infected by WIN32:CTX

any and all help would be greatly appreciated


Report Offensive Message For Removal

Response Number 1
Name: clive_pearce
Date: October 1, 2007 at 07:18:18 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Google

http://www.google.co.uk/search?sour...

Before posting try google. Backup. Use anti virus software.


Report Offensive Follow Up For Removal

Response Number 2
Name: CkDarrow
Date: October 1, 2007 at 07:20:47 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
I currently use pc shield, is there a problem with this antivirus?? Also, could this be causing the trouble with notbeing able to "login" to sites??

Report Offensive Follow Up For Removal

Response Number 3
Name: CkDarrow
Date: October 1, 2007 at 09:27:11 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok...sorry for having a blonde moment..

I googled the win32:ctx

from what I can see the "free repairs" are once you have a subscription, unless I am understanding wrong.

Now the win32 showed up when I downloaded and ran avast. I curently have pc shield, is this a good antivirus program??

now, from my original post with the trouble of not being able to "login" to pages. Is it possible that I have the virus that coincided with the greeting card emails??

Do I need to reformat?? if so, I do have my original disks. Or would just doing a system restore from the properties box in "My computer" work??



Report Offensive Follow Up For Removal

Response Number 4
Name: clive_pearce
Date: October 1, 2007 at 10:51:00 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
You are probably right about the "free repairs"
I can't make any comments about pc shield.
Run your virus scan avast? perhaps that can remove the problem.
Unable to login to pages sounds like spyware.
I use Avg free, that picks up most things, to get rid of spyware, install adaware 2007, & spybot.
They should get rid of most spyware.
You can try a system restore. But sometimes spyware gets into that as well.

Don't format yet. Before you do that backup any files you want. Then if worse comes to worse, you could reinstall.

Here are somefreeware spyware removers
http://www.snapfiles.com/downloadfi...

Also http://housecall.trendmicro.com/

if you still get problems, perhaps someone with more knowledge can give you more help.

Before posting try google. Backup. Use anti virus software.


Report Offensive Follow Up For Removal

Response Number 5
Name: XpUser4Real
Date: October 1, 2007 at 13:26:35 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
**system volume information\_restore....... (I can type it all if needed)**

Sounds like it is located in your restore. Best thing to do would be to turn off system restore and scan again with Avast.

**I currently use pc shield, is there a problem with this antivirus??**
Are you talking about web shield?

I wouldn't turn off web shield because that is what gives you the best real-time protection. It will alert you of a virus BEFORE it can get on your PC and allows you to abort the connection.

Also run this free on-line scan:
http://www.spywareinfo.com/xscan.php
and remove all it finds

If you need some more GOOD free cleaners, click on the red link.

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 6
Name: CkDarrow
Date: October 1, 2007 at 17:01:01 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok...I have ran spybot and housecall and both cleared out a few things. However, I still am not able to "login" to the pages.

i have not yet done a stysem restore. How do I turn it off??

I will next try to run the spywareinfo but would like to turn off the system restore if that is what I need to do.

this has become so frustrating and i do appreciate ALL the help


Report Offensive Follow Up For Removal

Response Number 7
Name: CkDarrow
Date: October 1, 2007 at 18:52:39 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok...I turned off system restore and ran avast again.

still am not able to "login" to anything.

do you think that i am at my last resort of having to reformat??



Report Offensive Follow Up For Removal

Response Number 8
Name: CkDarrow
Date: October 1, 2007 at 19:23:40 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok...I turned off system restore and ran avast again.

still am not able to "login" to anything.

do you think that i am at my last resort of having to reformat??



Report Offensive Follow Up For Removal

Response Number 9
Name: jobr_irlatyahoo.com
Date: October 2, 2007 at 03:35:17 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Hi,
Thanks everyone.
I have a similar problem.
Everything is blocked on my computer when starting up.
It is this ccPxySvc.exe file.
What is it???
Does this mean that it is a Norton bug?
I use Norton 2003 updated regularly.
Should I be using a more recent edition?
jobr_irl@yahoo.com

Report Offensive Follow Up For Removal

Response Number 10
Name: XpUser4Real
Date: October 2, 2007 at 08:48:26 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
CkDarrow, did you get a chance to run the x-cleaner scan?
One more thing if you CAN'T get on the internet, you can use winsockfix:
http://www.majorgeeks.com/download4...
Let us know how you are doing

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 11
Name: CkDarrow
Date: October 2, 2007 at 09:03:09 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Hi XpUser4Real

I did run the x-cleaner and here is what it came up with:

Detected CoolWebSearch:
CLSIDs (1) :
{4e330863-6a11-11d0-bfd8-006097237877}

CLSIDs (2) :
{4add2181-e229-11d2-805c-00105a21b151}
{4add2182-e229-11d2-805c-00105a21b151}

Registry Keys (6) :
HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{4e330863-6a11-11d0-bfd8-006097237877}
HKEY_CLASSES_ROOT\CLSID\{4e330863-6a11-11d0-bfd8-006097237877}
HKEY_CLASSES_ROOT\typelib\{4add2181-e229-11d2-805c-00105a21b151}
HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{4add2181-e229-11d2-805c-00105a21b151}
HKEY_CLASSES_ROOT\interface\{4add2182-e229-11d2-805c-00105a21b151}
HKEY_LOCAL_MACHINE\Software\Classes\Interface\{4add2182-e229-11d2-805c-00105a21b151}

I am able to get onto the internet just not login to the secure pages like to sign into yahoo , ebay ect...



Report Offensive Follow Up For Removal

Response Number 12
Name: XpUser4Real
Date: October 2, 2007 at 09:05:27 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
did you try the winsockfix?

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 13
Name: CkDarrow
Date: October 2, 2007 at 09:28:23 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok...I ran the winsockfix and thought that that had done the trick.

I was able to at least get to the sign in page on yahoo for instance but when Iclicked enter after entering my password it came up to the same "not available page"

so then I tried at ebay and it takes me to a dell search page saying that it cannot find that page
------------------

Do I have anymore options???

I do appreciate all of the help so far :O)


Report Offensive Follow Up For Removal

Response Number 14
Name: XpUser4Real
Date: October 2, 2007 at 09:44:03 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Try the LSP fix:
http://majorgeeks.com/download4180....
See if that gets you going

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 15
Name: CkDarrow
Date: October 2, 2007 at 12:13:26 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
it said that no trouble was found :O(

Report Offensive Follow Up For Removal

Response Number 16
Name: XpUser4Real
Date: October 2, 2007 at 20:19:45 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
may as well give SuperAntiSpy a shot:
http://www.download.com/3642-8022_4...

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 17
Name: CkDarrow
Date: October 3, 2007 at 18:20:53 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
ok, ok...I am soooo frustrated. That pulled off some tracking cookies that the others had not but it still did not do the trick. Any other suggestions???

Report Offensive Follow Up For Removal

Response Number 18
Name: btk1w1
Date: October 4, 2007 at 16:30:09 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Before you reformat try a couple of fixes with Hijackthis.

HiJackThis HERE

accept the license agreement and install.

Once installed and opened click "Do a system scan and save a logfile", copy and paste the text file it opens back here.

Don't use it to fix anything just yet as it will bring up legitimate processes as well as bad ones, I will need to analyse them.


Report Offensive Follow Up For Removal

Response Number 19
Name: CkDarrow
Date: October 5, 2007 at 12:07:55 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Ok..thanks here is the results from hijackthis

---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:01:39 PM, on 10/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe
C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar6.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar6.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Dell\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [RealTray] "C:\Program Files\Real\RealPlayer\RealPlay.exe" SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] "C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe"
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [MSKDetectorExe] "C:\Program Files\McAfee\SpamKiller\MSKDetct.exe" /uninstall
O4 - HKLM\..\Run: [AVP] "C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe"
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Event Reminder.lnk = ?
O4 - Global Startup: ImageMixer for HDD Camcorder.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\scieplugin.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://prerelease.trendmicro-europe...
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://meijer.lifepics.com/net/Uplo...
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/do...
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: The Shield Deluxe 2008 (AVP) - PCSecurityShield - C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Network Magic Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe

--
End of file - 9065 bytes


----------
I also have now started to get the following message...

FireFox cannot connect securely to ---------.com because the SSL protocol has been disabled

this shows up when I now try to sign/login ...it was suggested by a friend that I try firefox and this is what shows up, I also have now similiar wording show up at times with IE...

Here is yet one more wording that comes when i click on a secure page link"

SSL Protocol Alert
The SSL protocol version that your browser uses is SSLv2 and it is not compatible with the server settings.

Please try the following:

- Check the SSL protocol settings on your browser for SSLv3/TLSv1 protocol support and enable the same.


Report Offensive Follow Up For Removal

Response Number 20
Name: XpUser4Real
Date: October 5, 2007 at 12:31:16 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
if no joy on the hijack reading, PM jabuck and ask him to check it out. He is real thorough and knowledgeable on hijackthis.

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 21
Name: btk1w1
Date: October 5, 2007 at 18:28:59 Pacific
Subject: Computer Virus Trouble ??
Reply: (edit)
Your HJT log is relatively clean. There are a couple of entries that are suspicious (files where they don't belong), but not necessarily malicious. These belong to MusicMatch Jukebox.

If you want to try uninstalling it to rule out the possibility that these are causing the problems (MusicMatch Jukebox can always be reinstalled later), go to "add / remove programs" in control panel and uninstall.

Once you have uninstalled MusicMatch Jukebox, boot into safe mode by tapping f8 on startup. Run HiJackThis again and "fix" only these entries if they still exist.

These are a couple of MusicMatch Jukebox entries that appear to be in the wrong location and two ActiveX-Objects that can be re-installed next time you visit the web page(s).


C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe

C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe

O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://prerelease.trendmicro-europe...

O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/do...

If you find you your pc is still playing up you can temporarily try disabling (don't remove) PCSecurityShield to see if this might be the cause.

Remember to turn your system restore back on if you haven't already.

Good advice is offered from XpUser4Real in Response Number 20 if your pc still behaves badly.



Report Offensive Follow Up For Removal



Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Computer Virus Trouble ??

Comments:

 
  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 


Data Recovery Software



Version Tracker Pro
Keep your software current and secure, effortlessly

Click Here for a Free Scan

Driver Agent
Automatically find the latest drivers for your computer.
Click Here for a Free Scan



The information on Computing.Net is the opinions of its users. Such opinions may not be accurate and they are to be used at your own risk. Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE

All content ©1996-2007 Computing.Net, LLC