Posts by H2ofield

The problem seems to have fixed itself. The emails are now going through. I must have had something to do with Network Solutions new filter.

By the way, there is nothing nasty about the attachment. Just a product datasheet created in Corel. I've been sending this and others for a number of years.

Hi,
I'm not sure if this is the correct forum, so please let me know if there is another one that is more appropriate for this question… I have a home office/business and I'm using MS Outlook 2007 for emails. I'm trying to send an email that has a particular PDF file attached. For whatever reason, the email won't reach its destination if this specific PDF is attached. However, if I remove the attached file and send, the email goes thru. I have successfully been able to send other PDF attachments, but not his one. So, to figure this out in some creative ways, I tried to send an email w/attachment through a Yahoo account online, just to see if it is my ISP (IP address with Time Warner) or the company who hosts my company website (network solutions). However, even with the Yahoo account I cannot get the email w/attachment to reach any destination.
I'm perplexed. This is just a product datasheet in PDF format. I have sent it to many customers before with no problem. Also, I have not changed anything recently to this file. Can anyone figure this out? I have attached the PDF file to this thread. Maybe someone can try to send it to see if they see the same problem.
By the way, I find some other product PDF datasheets that wouldn't go through when emailed. The only common denominator that I can see is that these files have the letter …

Thanks everyone. I figured out how to do what I needed. I used the software that came with the new HD. It did a better job of explaining how to accomplish this task. Basically, I wanted to partition the drive into two partitions, which I have now done.

Thanks again,
Barry

Hello,

I purchased an external HD to backup my existing HD. I want to reformat my existing HD to get my system running like new (currently slow w/occasional problems). Anyway, I hooked up the external HD w/no problem.

Now I want to partition the new external HD. All the tutorials I find say to right-click the unallocated portion of the disk and choose "New partition". This is where I'm stuck. I've tried to right-click everything on the screen that even resembles this and I don't get a option for create a new partition. I have attached a screen shot showing what the screen looks like and what the options are that i'm getting when I right click.

Am I doing something wrong? Why cant I get the the partition wizard? What am I missing here? This should be pretty straight forward...right?

Thanks for any help out there.

H2Ofield

Hi Caperjack,

Is this done by selecting the deleting them in HJT?

I do see a bunch of them that don't need to be running, but I don't want to mess anything up.

Thanks,
H2OFIELD

HI,

I am noticing that it is taking way longer for my system to reboot these days. I looked around on google to see if there were any solutions for this problem. I did find some information, but I'm hesitent (intimidated) to try them. Is there an easy/simple way to find whats holding up my system?

Thanks,

H2OFIELD

I don't know if this is a malware problem or just some kind of softare or hardware conflict. However, here is my HJT log, just in case:

Logfile of HijackThis v1.99.1
Scan saved at 11:17:33 PM, on 6/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec …

Thanks T. I downloaded the driver. It'll take a little while to if it works. I'm good for now.

Take care,
H2ofield

Hi,

I am having a problem where my screen freezes up in screen saver mode. It seems like my computer is still functioning though. This happens when I move the mouse to get out of screen saver mode

I had a different problem with my nvida driver in the past and had to reload it. Could this be a problem with the driver? How can I fix this? Everytime this happens I have to turn the power off, which isn't good.

Thanks.
H2ofield

Hello,

I'm attempting to create a page on my company website that lists products in my inventory. I've created asimple page, but need to create the scripting to make it do the following:

1. When the customer enters a quantity in the form field next to the part number(s), the quantity(s) and part number(s) they have chosen will then be moved to a new page when they click continue. This will be the page where they enter their contact information, etc...

2. I would like the second page to show the part numbers and quantities they requested from the previous page.

3. For phase one, all I want to have the form/page do upon clicking submit is to send the data (asp) to the server and then have an email sent to me with all the information. I will then reply to the customer with a quote. (I have some experience with submitting forms with ASP to a server, so I think I'm good here)

4. Phase two - I would like to have the server or javascript automatically quote the custmer upon clicking submit from the second page. Each part number is different and will have a different price. I would also like for them to be able to order the product at this point (credit card).

For many of you, I'm sure this is a very simple task. The question is...is it easy to explain how to do this? I …

Thanks again Crunchie. Here is my HJT log. Please let me know if you see anything that needs to be removed or looks suspicous. If something looks suspicious, is there a resource I can use that will help me identify it and if it should be removed?

Logfile of HijackThis v1.99.1
Scan saved at 5:50:07 PM, on 1/14/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\System32\imapi.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ascenddevices.com/myhome.htm
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
…

Hi Crunchie,

Everything is looking good so far. I did all that you said to do. Here are a couple things I'd like to mention:

1. I re-booted in safemode and it still took forever...about the same as before.

2. After making the changes to the msconfig. I re-booted and my system gave me an alert saying:

"You have used the system configuration utility to make changes to the way Windows starts. The system configuration utility is currently in diagnostic or selective mode, causing this message to be displayed and the utility to run every time windows starts. Choose the normal start up mode on the general tab to start windows normally and undo the changes you made using the system configuration utility"

What should I do to eliminate this message so it wont come up when I re-boot. If I do what the message says, it'll undo everything we did.

3. The virus that appears to have been eliminated had also changed my homepage to (www.microsoft.com/isap/redir.dll?prd=ie&prd=ie&pver=6&ar=msn.home) I changed it back to my homepage and everything seems fine. I just wanted you to see the URL, just in case there's something there that needs attention.

4. When I run spybot S&D, two alerts show up:
(windows security center disable notify)
(windows firewall center disable notify)
I didn't delete them because they look legit. Should I do anything with these?

5. When I ran Ad-aware it found these:

Hey Crunchie,

Here's what took place:

- I made sure HJT and its backup file were in its own directory (c:HJT)
- I ran HJT and deleted everything you stated, all of which existed on the HJT report.
- I tried to delete the file c:\windo.......dmzey.exe file,but it wouldn't let me.
- Re-booted in safemode and was able to delete the file (dmzey.exe)
- Re-booted back to normal mode

I haven't run any of my virus/spyware programs to make sure they run without being cancelled/terminated; however, I will try it now.

I'm also experiencing another problem, where it takes about 6 minutes to completely reboot to safemode and 9 minutes to reboot back to normal mode. It has never taken this long. This has been going on for some time now and is probably an unrelated issue. Do you have any suggestions as to how I can find the problem and fix it?

Lastly, when looking at my HJT log, I see stuff that seems suspicious to me. Is there anything that you see that might pose as a problem?

BTW - Where is the button that says "Donate to Crunchie"?

Thanks for your help!!!!!!!!!!!!!!!!
Barry

Logfile of HijackThis v1.99.1
Scan saved at 11:18:31 PM, on 1/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe

Thanks Crunchie!

Here is my Fixwareout report, followed by my HJT log:

Fixwareout ver 1.003
Last edited 1/12/2006
Post this report in the forums please

Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\xedocne
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\23plhps
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\mgcppp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\tesvaf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\32refaselif
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\pqgmd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\xedocne
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\gib_ogol
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\golmedi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\23plhps
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\mgcppp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\tesvaf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\32refaselif

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Search by size and names...
C:\WINDOWS\SYSTEM32\CSPUF.EXE
C:\WINDOWS\SYSTEM32\DMGQP.EXE

»»»»» Misc files

»»»»» Checking for older varients covered by the Rem3 tool

HJT Log....

Logfile of HijackThis v1.99.1
Scan saved at 8:59:50 PM, on 1/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\~AceTemp\hijackthis\hijackthis.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\rundll32.exe
…

BTW- I meant to post my HJT log. Here it is. Thanks for any help

Logfile of HijackThis v1.98.2
Scan saved at 6:09:57 PM, on 1/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ACT\SideACT.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hjt\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ascenddevices.com/myhome.htm
R3 - URLSearchHook: (no name) - {E3F6D21B-9B80-D9E4-72B1-864E577005E8} - zantu.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} …

Hello,

Today, I had to disconnect my modem.When I reconnected it, all hell broke loose. Norton alerted me to a trojan virus that it wasn't able to delete (C:\windows\system32\howiper.exe). I ran all my spyware programs (ad-aware, spybot S&D, norton anti). It was at this point when I knew I had a problem. Each program was abbruptly ended by windows, saying it ran into some kind of problem.

I then noticed that a program (unspypc) was loaded onto my system and a couple toolbars were added to IE. I uninstalled the unspypc program, but can't seem to figure out how to remove the toobars.

I feel trapped. I tried to backup my important files onto DVD, but that program was ended by windows too! Please help!!!!

H2Ofield

Seems the problem is solved. Thanks J Search!

Hello,

I've been having intermitant problems with IE. I have all the security software running and I try to stay out of trouble. Anyway, the problem is that sometimes when I click a link to a website, I get the "cant display" screen. I've gotten kinda used to the problem, because all I have to do is go back and click the link again and the webpage will display...it never happens twice.

I've had luck solving some past problems by posting my HJT log and I was hoping someone could take a quick look and see if there is anything obvious...Thanks!!

Logfile of HijackThis v1.98.2
Scan saved at 1:20:52 PM, on 11/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
…

Hi,

I'm having a problem where my emails appear to get stuck in the outbox in Outlook. However, the emails are getting sent, per the recipient. I look in the sent folder and don't see the sent email. This only happens on some emails.

Very strange. Can someone help?

Thanks,
Barry

Hello to all you wonderful folks who have helped me in so many ways (i wish there was a face with its lips puckered)

Anyway, I'm trying to insert a company logo that was created in Photoshop into a datasheet created in CorelDRAW 12, but no matter what format I save the Photoshop file in, it looks like crap when I import it into my CorelDRAW workspace! Why can't this be simple? What the heck do I need to do?

I've got a book on the way that will hopefuly help me, but I'm the impatient type. Can someone help? I'll stay up all night if I have to!!!

Thanks in advance.
Barry

Rus,

You are right. I went image-happy. I've changed the text to html/CSS and it looks way better. I'm still having troubles getting CSS to give me the effects that I had in the image (drop-shadow).

Thanks for your help.
Barry

Thanks. I'm taking your advice on creating the drop-shadow using CSS/filter in Dreamweaver, but I can't seem to get it to look right and neither of the two books I have on Dreameaver go in depth about how to use CSS extensions/filters. Anyway, if you know of any resources, please let me know. Thanks again.

Barry

I've just created my first website using Dreamweaver MX 2004. It took me quite some time just to get somewhat familliar with all the programs (fireworks, Flash, etc...). I used Fireworks to create most of the site, but I'm not sure if this was a mistake. It seams that the text from the Fireworks images is kinda blury, please see www.thepiezoexchange.com

Is there a trick to making text in Fireworks look clean? Maybe a particular font?

Please help.

Barry

Well, it looks like the problem is still there. Is there anything else we can try?

Thanks everyone for your help. I put HJT in its own file under c:. I also fixed the item you told me to. I'll check and see if it fixed my problem. Here is my log:

Logfile of HijackThis v1.98.2
Scan saved at 12:57:44 PM, on 12/1/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hjt\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 …

Will do. Thanks for the response. How does my HJT log look?

Hello,

Thanks for your help. Here is my HJT logfile.

Logfile of HijackThis v1.98.2
Scan saved at 6:22:04 PM, on 11/29/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hjt\HijackThis.exe
C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" …

Hello,

I had a problem awhile back with the About:blank virus. I managed to finally rid myself of the bug. However, in the process I must have done something to my system. Whenever I try to play video, enter certain websites or run certain programs, my system goes wacky on me. My screen goes blank (black) intermittently and sometimes completely freezes up. I then have to reboot and avoid those programs.

I'm considering cleaning my HD and re-installing Windows, but I know its a big process and I've never done it before. Unfortunatlely, it's been awhile since the time I first started seeing this problem, so I can't pinpoint what I might have done to cause it. Can anyone identify what my problem might be, so I can avoid this lengthy solution?

Graciously,
H2OFIELD

Clarification. I couldn't find the BHO in APM, I was able to delete it in HJT.

HI,

Did what you said, downloded APM, fixed the lines w/HJT, tried to find the BHO from the HJT log, but couldn't find it. It definitely wasn't there.

Didn't run the rest of the programs, since I couldn't complete the steps. What should I do next???

Well, I turned off Spywareguard, rebooted in safe mode, ran my adware programs, with system restore disabled, then rebooted...it's back. As you can see below.

I'm starting to feel like finding the folks who do this stuff and....well you know. :evil:

Logfile of HijackThis v1.97.7
Scan saved at 9:21:43 PM, on 6/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} …

Hello again.

Another thing. Spywareguard keeps stopping my home page from being changed. It also keeps warning me that a BHO is being added to my system. It gives me a series of numbers and letters in {}. File Location: C:WINDOWS\System32\igniica.dll. I looked at properties for the dll and it is an unknown program. Could this be the cause or part of the problem?

Hi Crunchie/Yzk

I put hjt in c:. I'm wondering if those backup files that are left can cause problems? If so, I may have some from when I deleted the some stuff before I moved it.

Anyway, I did everything I was told up to this point. The problem still exists. Something in my system keeps reloading. Plz see the hjt report below:

Logfile of HijackThis v1.97.7
Scan saved at 6:59:34 PM, on 6/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\Symantec\LIVEUP~1\SNDWarn.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\hjt\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec …

Funny (not really), when I sent my above reply, spy guard alerted me that my homepage was being changed, as well as a search toolbar. I seems that these damn programs hitch on to info being sent by me to other sites. Just thought i'd mention it.

Hello and thank you for the reply.

I'll start in order w/YZK, I tried to load trojanhunter @ trend micro, but I ran into a problem I've been having periodically. Sometimes when I'm surfing the web or rebooting, Explorer interrupts the session with a dialog box (below) and then is forced to shutdown explorer. This has all started just recently. Two examples are as follows:

#1 - Every time I reboot, I get a dialog box from explorer saying "Itouch application has encountered a problem and needs to close...." It then asks me to "send an error report" or "don't send". I think this may be due to me foolishly removing stuff with Hijackthis. (Note: below I have pasted an HJT log that I did prior to my foolishness (didn't heed the warnings :sad: )

#2 - Recently, when i'm surfing, or in the case of downloading (like with trojanhunter), I get a dialog box from explorer "Internet Explorer Encountered a problem and needs to close - Send error report - Don't send".

So, I wasn't able to run trojanhunter. However, I did run all the spyware programs (CWshredder, Adware, AdwareAway) in Safemode and found nothing.

Crunchie...you big dog!

I did what you said. Below is a HJT log from before I removed stuff and also a log after I just rebooted and scanned everything under safemode:

Thanks again Super Heros...I don't know what I would do w/o you!!!

LOG #1 - …

Hello,

I've been reading many of the threads to rid my computer of about:blank, in an effort to save you pro's some time, but there's still something in my system. I've run adware, cwshredder, spybot and even loaded spyguard, which has helped to keep about:blank from changing my homepage. Spyguard keeps poping up letting me know that something is changing my homepage and then lets me choose to revert back to my old settings. Here is my hijackthis log (note:i've already deleted some stuff, which was risky, but I don't think anything harmfull (R0, 1, 3))

Logfile of HijackThis v1.97.7
Scan saved at 10:00:21 PM, on 6/17/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Barry Waterfield\My Documents\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe

O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} …