TallCool1 81 Practically a Posting Shark Team Colleague

I haven't loaded and tried Netscape because I've had loathsome experiences with N7. What could be going on? Can I undo this oddity?

Don't let a bad experience with Netscape 7 sour you. It's based on an early version of Mozilla, with AOL bloatware added. The current version of Moz is about 4 revs newer than that, and a new version of Mozilla is due soon as well.

TallCool1 81 Practically a Posting Shark Team Colleague

I changed the battery with a brand new one. It has a PIII 733mhz processor. 512 of ram. The battery is a CR2032. Could it be because I have a 133mhz front side bus processor running on pc100 ram? I doubt it because my friend has a PIII 933 running PC100. any ideas? I bought it used so anythings possible. its an Abit-WB6

The FSB has nothing to do with the real-time clock. If the battery is good, it should be OK. Make sure that the CMOS-clear jumper is in the "normal" position and not the "clear" position and that the button cell is OK. I usually test them under load with a two-cell penlight bulb applied momentarily.

Does it hold the other settings? If so, the clock part may have locked up for some reason (unusual, but it does happen), requiring that the CMOS be cleared and re-doing the setup.

Another possibility is that the clock crystal is broken or loose. Most clock crystals are 32,768 Hz quartz "tuning forks" in a small, cylindrical metal tube located near the button cell. Look and see if it has come loose in handling from being bumped around--it happens. They are a standard part and can be found, for example, in a broken or dollar-store digital watch.

TallCool1 81 Practically a Posting Shark Team Colleague

My laptop up-and-died today with ~5 gigs of valuable GIS and hydrology work on it. I desperately need to recover these data. I've got the HDD in an antistatic bag next to me and I'm wondering if there isnt an adapter utility to plug the li'l SOB into a 40-pin desktop cable so I can retrieve the data?

Right now, the data are orders of magnitude more important than the machine (and cash is a limitation) so dont worry about the computer - I simply need to know how to get my LIDAR data back.

I am so seriously screwed if I can't recover this work because there is no way I can replace it in time.

anybody have any hints?

Thanks in advance
freakin' out gkd

There are adapters sold that break out the laptop-drive connector (which includes both power and signal) to a 40-pin IDE-connector-plus-power-Molex. Most well-stocked computer stores have them; I have seen them for as little as $6 and as much as $15.

Good luck!

TallCool1 81 Practically a Posting Shark Team Colleague

yea , there was no virus, but what is malware?

Malware is a general term for nasty software, which includes viruses, Trojans, worms, hijackers, spyware, and (to a lesser extent) adware.

TallCool1 81 Practically a Posting Shark Team Colleague

i deleted just the one specified and also installed an anti virus after i did a system restore my virus scan i just paid 50 dollars for was erased so it found 10 infected and fixed two of them and quartned. six of them and two are still infected. it says virus detected java/byteverify. is that something to be afraid about?

It depends upon where it was found. Can you show me the path to where it was found? Also, look at this.

TallCool1 81 Practically a Posting Shark Team Colleague

should i delete all of the BHO or just the one you specified?

Just the BHO specified. The rest are benign.

TallCool1 81 Practically a Posting Shark Team Colleague

yes i am running DSL so i should run highjackthis again and fix the problem for thos ads on HP and the BHO thing

Yes, fix them . My question re DSL was because of this line:

O17 - HKLM\System\CCS\Services\Tcpip\..\{BA0B9895-0E90-44DF-953E-0DC5D45B94DD}: NameServer = 151.164.14.201 151.164.1.8

which may cause problems. I'm on SBC, as well--and fixed DNS servers can cause problems. Check with them as to how to turn on DHCP--stuff should load more reliably over time.

TallCool1 81 Practically a Posting Shark Team Colleague

You have some minor problems to remove. This first batch is useless paid-search listings to make money for HP:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qus9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus9.hpwis.com/

This is a problem BHO:

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

That's all I see for now. Are you running DSL?

TallCool1 81 Practically a Posting Shark Team Colleague

I am having some problems in our internet explorer. We have the latest version and I have XP. Recently I have scanned and found adware on my computer, but it will not delete. I have tried deleting in the registry and through my mcaffee virus scanner and it just keeps coming back.

You have been hijacked, no doubt. You may have CoolWebSearch. You need to run CWShredder.

Most of the rest of what you have can be removed automagically by Ad-Aware and Spybot - Search & Destroy. Run each individually, but be sure to update the detection data files before running either program.

Once you run those three programs, download run the newest version of HijackThis and post the log as text.

HijackThis is a very powerful tool that should only be used in conjunction with a knowledgeable support team. With this program, you can examine the Windows Registry startup list and running processes in detail, then fix the problems interactively (once you know how). The linked page features quick-start details; excellent for beginners, but use this tool only after running Spybot - S & D and/or Ad-aware -- and, unless you know exactly what you are doing, don't make any changes until you consult with us. Note: as of this writing, the HijackThis download button does not work. Use one of the listed Other Download Locations instead.

TallCool1 81 Practically a Posting Shark Team Colleague

Hey all,

I just got a new motherboard it's and Abit-wb6. My question is does anyone know any sites where I can download the manuals on it. What is the biggest hard drive you can put in it? whats the board worth? I found it to be worth between 100$ - 130$ on the internet (not ebay) I paid 10$ for it used works great. Was that a good price? Am I able to hook up my front USB and sound on it? Where can I plug my "cd-in" cable on the board? Thanks in advance.

Not a very good board. The 810 chipset is pretty minimal, the built-in graphics are barely adequate, and there's no AGP slot to add another card. Good for the Internet and word processing, not much more. Good value for the price, though.

TallCool1 81 Practically a Posting Shark Team Colleague

www.boomspeed.com/50kdude/hijacked.wps it wasnt posting the list so I uploaded it to boomspeed. Im hoping you can still help thanks? :)

Your posting problem has 2 parts: one is that you are not using the newest version of HijackThis. You used 1.97.5; current is 1.97.7--second, a WPS file contains characters that, apparently, the board software does not like. You will have to post the new log as a text file (.TXT).

That having been said, you do have several problems. You are way behind on your patches--none have been applied to Internet Explorer at all, which causes real problems. Once you get things fixed, go to http://windowsupdate.microsoft.com and get everything you can.

You may have CoolWebSearch. You need to run CWShredder.

Most of the rest of what you have can be removed automagically by Ad-Aware and Spybot - Search & Destroy. Run each individually, but be sure to update the detection data files before running either program.

Once you run those three programs, run the newest version of HijackThis and post the new log as text.

TallCool1 81 Practically a Posting Shark Team Colleague

I really appreciate all your responses. I have never used a MAC before,so if I was going to go that route what is the major difference between working on a MAC,and working on Windows? I have heard it's complicated,but how hard can it be?

Not harder per se, but definitely different. The MacOS and its graphical user interface are built on top of a Unix-clone OS similar (but not identical) to Linux. One drawback is its one-button mouse, a throwback to the Mac's history as a failed terminal. The processor family is entirely different than the one used in IBM PC-compatibles, so comparisons are Apples and oranges. :lol:

For example: clock speeds. The PowerPC (PPC) chips used in the current-generation Apples are not clocked as high as the x86 chips, but are more efficient--so are faster clock-for-clock. Apples are more expensive for equivalent performance, somewhat more difficult to expand, have a less-extensive software selection--but as someone once pointed out, how many word-processing programs do you really need, anyway?

There are no official Apple clones, one reason why prices are higher. Apple has about 5% of the market, so you compute with the minority. This does have some advantages, one of which is greater resistance to malware like viruses, hijackers, Trojans, etc.--but I mostly run a free version of Linux, so they don't bother me, either.

I have chosen to stick with x86 systems, but to mostly run Linux--so I get (mostly) the best of both worlds.

TallCool1 81 Practically a Posting Shark Team Colleague

I think I might have messed up the contrast/brightness of the screen
because now the texts appears too sharp it's almost hurting my eyes there's a button on our screen where you can adjust the colour etc and what I accidentally did was I pressed an auto adjust button which seems to have been the cause....so I tried to get the brightness/contrast back to normal but the writings still appears so sharp... is there anything I could do??

Most monitors have a setting called Reset or Factory Defaults or something similar. Try that.

TallCool1 81 Practically a Posting Shark Team Colleague

I just received a computer from a friend. It is a PII 300mhz with 64 megs of ram, 3.2 gig hard drive. My question is how do I identify my motherboard. I have a feeling it is a very good board. It has an Award Modular Bios v4.51PG (29-may-1998), on-board sound, AGP, 4 PCI slots, 2 ISA slots, 3 RAM slots, It's a slot 1.

*05/29/1998 i440BX-ITE867-2A69KC39C-00

See http://www.wimsbios.com/index.htm?/numbers.shtml and

http://www.chaintech.com.tw:8008/Downloads/MBBIOS.htm

You may need to update the BIOS, or it will probably have either an 8 GB or 32 GB hard drive capacity limit. Your Celeron 466 would work well in it.

TallCool1 81 Practically a Posting Shark Team Colleague

About:blank and c:\searchpage.html keep popping up as my new homepage, regardless of what I do. I am not sure if they are one and the same or not.

This problem has been covered quite thoroughly in this thread. The user never reported back as to whether it solved his problem, though. Check it out.

Here's what should be removed:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = c:\searchpage.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\fmpcka.dll/sp.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\fmpcka.dll/sp.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\searchpage.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = c:\searchpage.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\fmpcka.dll/sp.html
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = c:\searchpage.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\fmpcka.dll/sp.html (obfuscated)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\fmpcka.dll/sp.html (obfuscated)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = c:\searchpage.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = c:\searchpage.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\fmpcka.dll/sp.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by EarthLink, Inc.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = c:\searchpage.html

R1 - HKLM\Software\Microsoft\Internet Explorer,Search = c:\searchpage.html

O2 - BHO: (no name) - {1AE4750A-C046-48BB-B24B-95377924F730} - C:\WINDOWS\System32\fmpcka.dll

O13 - Home Prefix: c:\searchpage.html?page=

O13 - Mosaic Prefix: c:\searchpage.html?page=

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe

then reboot and delete the associated files.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Remove these as resource wasters:

O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

TallCool1 81 Practically a Posting Shark Team Colleague

I am looking to either buy a new computer or have one built for me. Can you tell me what computer would be best or where would be a good place to go to have one built for me? I know I want a CD-ROM, DVD-ROM. It will mainly be used for internet, games, music. Is HP a good brand? I would like to get the best. I really don't have a budget,but I don't really want to spent more than $3000.

Let me give my background up front. I have been an electronic technician for 40 years and a PC technician for about 25 years. I was a major PC warranty station for Zenith in 1984 and have taught computers, as well.

Avoid Dell like the plague it is--they are totally custom, hence difficult (near-impossible) to upgrade--and you are limited to what Dell sells: Intel only.

Most of the negative stuff about HP and Compaq is based on the old-generation equipment. While I might not use them myself (I build my own these days), I have, in fact, recommended the newest generation of Compaqs to some users.

My recommendation is that you find a local shop with a good reputation and pick off-the shelf components. If there are computer trade shows in your area, go to one. You can usually find them listed in the classified section of your local newspaper. You can talk to local dealers side-by-side. Another tactic is to find a local computer …

TallCool1 81 Practically a Posting Shark Team Colleague

When I go into my sent items folder it lays out my emails as if I've clicked 'to' at the top so as to order them alphabetically in order of the recipients address. I don't want that I want them ordered by date...but it keeps resetting.

Which version of Windows? Which version of OE? This information is needed for further exploration into your problem.

TallCool1 81 Practically a Posting Shark Team Colleague

My hard drive keeps restarting itself before it gets to the welcome screen. I can read the contents of the HD but I can not get access to my documents because it is denied.

There are a couple of possibilities. One is a damaged Registry. You can boot from the XP CD (if you have the full version) and use the "repair" option.

If all you have is the so-called "restore" CD, I'm not sure how that would work, as I have not used one.

If you can boot from Knoppix, I don't think the power supply is your problem.

If you can't get into Safe Mode, your problem is most likely bad RAM. Try running MemTest86.

TallCool1 81 Practically a Posting Shark Team Colleague

Hi,

I have a similar problem to recent poster amdm55. If a web link opens a new web page that's Ok but if it opens a small window from within that page it opens blank and freezes. I operate windows 98 second edition. If you open www.betfair.com and click on horses to open up a particular horse race and then click on the horse name, that's when the blank window comes up. I have run adaware as per the instructions to amdm55 and rebooted, and then run Hijack This.

Here's the main problem I see:

O3 - Toolbar: &FirstStop WebSearch - {E26FDEC1-053B-11D6-B969-CEEBA9E95046} - C:\PROGRA~1\BRUSHG~1\FSWEBS~1\IEBAND3.DLL

Then, after a reboot, delete the file C:\PROGRA~1\BRUSHG~1\FSWEBS~1\IEBAND3.DLL

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

You have to be very careful with adult and gambling sites, as they are ofen the source of dialers and hijackers--but, as far as I can tell, you have chosen some of the safest, most reputable ones available. Diligent monitoring is still required, however.

Remove these as worthless resource-wasters, too:

O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

You need to update your Java JRE. Your version has known flaws and is very likely part of your problem. Current is 1.4.2_04:

O16 - DPF: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0_01) -

You should also ensure that JavaScript is enabled. While this is a separate issue from Java itself, the …

TallCool1 81 Practically a Posting Shark Team Colleague

The below is what was found by HijackThis.

Actually, you only posted half the information--you left out the Registry-entries list.

What you posted looks almost clean--except for the RunDLL32 entry, which usually indicates a problem. Please post the rest.

I should point out that there is a security issue with WinZip 8.1 and below, so update to v9.0, or use 7-Zip instead.

TallCool1 81 Practically a Posting Shark Team Colleague

Logfile of HijackThis v1.97.7
Scan saved at 8:20:37 AM, on 4/21/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

A major problem right-off-the-bat is that neither your Windows XP nor your Internet Explorer are up-to-date. Partly due to this, you have been loaded with nasties. As soon as you clean up your problems, download all the patches you can get.

Most of the rest of what you have can be removed automagically by Ad-Aware and Spybot - Search & Destroy. Run each individually, but be sure to update the detection data files before running either program.

Then you can post your new HjT log back here.

TallCool1 81 Practically a Posting Shark Team Colleague

I just got hold of a Celeron 466mhz. I was thinking of selling it but I would like to test it first. I was going to test it in my server which has an Asus P2B-F motherboard will it see my Celeron 466mhz. I have a slotket adapter for it.

The PIII Celeron works fine with the BX chipset--they were made for each other. As long as the adapter is of good quality, add a decent heatsink and you could be able to push it to 600 MHz or more, no problem. Just bumping the FSB to 75 MHz could get you a decent bump-up in speed--if you kept it.

TallCool1 81 Practically a Posting Shark Team Colleague

this is what it said when I saved the log:

Most of what you have can be removed automagically by Ad-Aware and Spybot - Search & Destroy. Run each individually, but be sure to update the detection data files before running either program.

You can post your new HjT log back here. The following is mostly informational. I have replaced http with xxxx to reduce accidental clicks

With HijackThis as the only program running, mark and fix what remains of the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = xxxx://1-se.com/srchasst.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = xxxx://1-se.com/home.html (obfuscated)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\homepage.htm

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = xxxx://1-se.com/home.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = xxxx://opti.riviera.cc (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = xxxx://1-se.com/srchasst.html (obfuscated)

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = xxxx://riviera.cc (obfuscated)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = xxxx://1-se.com/srchasst.html (obfuscated)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = xxxx://1-se.com/home.html (obfuscated)

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\homepage.htm

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = xxxx://1-se.com/home.html (obfuscated)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = xxxx://1-se.com/srchasst.html (obfuscated)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = xxxx://opti.riviera.cc (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = xxxx://1-se.com/home.html (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = xxxx://riviera.cc (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = xxxx://1-se.com/srchasst.html (obfuscated)

R1 …

TallCool1 81 Practically a Posting Shark Team Colleague

After scanning with Ad-Aware, i had to reboot in safe mode (disconnected from the cable) to get rid of some viruses Norton found when ad-aware finished.I'll just post the HJT log for now.

You will also want to get rid of these resource-wasters:

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

For security reasons, you will also want to update WinZip to v9.0--or, better still, try the free 7-Zip instead--it's free, more efficient, and handles more compression types.

TallCool1 81 Practically a Posting Shark Team Colleague

i am getting the following message on boot up
stop: 0x0000007B(0xFAF73640,0x0C0000034,0x00000000,0x00000000)
I have checked the hard drive and it is o.k it boots up fine in another p.c--it wont even boot up in safe mode.

There are a few likely possibilities.

One is a memory error. This can be tested using MemTest86.

Another is a BIOS error, corruption. This can be cleared by following the instructions in your motherboard manual.

A third possibility is a USB error. Try unplugging all the USB devices or hubs plugged into the computer's USB port and boot it again.

That's all I've got for now. Keep us posted.

TallCool1 81 Practically a Posting Shark Team Colleague

I honestly fail to see how use of any one program over another would be more simple:

PrtScrn way:

1.) push Print Screen
2.) paste somewhere
3.) save

External App way:

1.) Load app.
2.) Tell it to capture
3.) Save shot

For example, I run TinyResMeter all the time anyway--great utility, it monitors my memory, resources, and CPU usage--so a screen grab is [PrintScrn]. That's it, one step, repeat as needed. Save is automatic, to a directory called ScreenShots. Each filename is automatically incremented. Much simpler.

TallCool1 81 Practically a Posting Shark Team Colleague

Novice looking for feedback. Just downloaded and ran HijackThis software. Before deleting anything, it said to seek advice. So, I'm posting for input.

You have a bunch of problems. The funny thing is, they all claim to not be adware/spyware--but several are.

Your best bet is a multi-step process. You should clean out the as many of the following as possible using the Add/Remove Programs menu: Comet, IncrediMail, and Kontiki. All of them are, at the very least, adware.

Some of them may have come in through the DiVX player. The free version is full of adware. There are other players that will play DiVX and related MP4 files that are not stuffed full of adware. I will discuss this elsewhere, if you wish; it's out-of-scope here.

After removing the programs listed above, run both Ad-Aware and Spybot - Search & Destroy (not at the same time, of course). Be sure to update the detection data files before running either program.

Once you have done all that, re-run HijackThis and post the new log.

Other problems of note (resource wasters and/or worthless):

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by InsightBB.com

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Do you really want to disable RegEdit?

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

TallCool1 81 Practically a Posting Shark Team Colleague

How Would I take A Picture Of My Desktop And Post It At A Forum As An JPG?

I think what some of the posters to this thread are losing sight of is the fact that the intent is to capture screens, not dink around with copy-and-paste and graphic-manipulation programs. The advantage of a program like TinyResMeter, SnagIt, or HyperSnap-DX is that a screen-grab is a one-step process. This allows a series of screen captures quickly, if needed--or at the very least, simplifies the process.

TallCool1 81 Practically a Posting Shark Team Colleague

I'm having a similar problem as well with our monitor
we have windows 2000 and recently a horizontal line
which keeps changing colour (usually it's red/pink/blue/yellow)
started to appear on the right side of the screen
it sometimes disappears but it always comes up again. Could this possibly be a trouble with the RAM as you've mentioned?

I assume you are talking about an LC display. If so, the problem is never RAM. Instead, it is usually a bad contact between the driver circuitry and the display panel itself. This happens because the contacts are secured by pressure, not gripping or soldering as is true with most other electronics; this is a major failure point for LCDs--and one of my biggest gripes about them.

Here's what I have suggested in the past, and it reportedly has helped in more than one case: monitor repairman that I am (or once was), it sounds like bad contacts between the driver electronics and the display itself. One relatively easy test for this problem is as follows:

With the unit on, gently grasp the left and right edges of the display. Gently twist the display (no more than a few ounces of pressure) as though you are wringing out a towel. See if the display flashes, changes, etc. This may even fix the problem by "wiping" the contacts of dirt or oxidation.

awveek commented: u r really cool man. I've had this problem & tried everything. I'm in uk and a pc tech person told I need a new lcd display. I my self tried ram exchange and opened up the laptop. but pressing the screen as u hav told worked like magic. Thanks a lot +0
TallCool1 81 Practically a Posting Shark Team Colleague

Hi guys,
I am having a problem with messenger service popups. I have resolved it once before, but I have just formated and reinstalled windows XP, and now I cannot remember how you stop these popups!

Another way to close the door on some of the vunerabilities used is by running Shoot the Messenger, DCOMbobulator, and UnPlug n' Pray from Gibson Research (about mid-page). In your case, Shoot the Messenger is the most important, but I would run all three.

TallCool1 81 Practically a Posting Shark Team Colleague

My Norton Anti virus has just expired and I wanted some ideas on a new one also a firewall that wont hog up alot of memory, resorces I dont mind paying for something if it works well

See my signature Best Free Software for Windows link.

TallCool1 81 Practically a Posting Shark Team Colleague

How Would I take A Picture Of My Desktop And Post It At A Forum As An JPG?
I'd also like to know how to turn a link into jpg, I've actually done this once in MS Paint but I don't know how I did it.

I use TinyResMeter for screen grabs. It's tiny, easy, and requires no installation.

Attaching files is easy, too. Just scroll down to Additional Options and select Manage attachments.

Unless you are referring to linking a graphic from another site...

TallCool1 81 Practically a Posting Shark Team Colleague

Error msg 'Operation Aborted' when accessing some websites. i'm using I.E 6.0 and whenever I try to access some specific websites like 'www.teamtalk.com'. I have a Win XP operating system.

More information would be helpful, like which updates you have installed. XP-Service Pack 1, for example or which patches have been applied against IE (Help->About will provide that).

That having been said, I suspect that your Java Virtual Machine has been corrupted or switched off--TeamTalk, for example, uses Java applets for scrollies. Try to download and install the Sun Java Runtime Engine--it's more compatible and complete, anyway.

TallCool1 81 Practically a Posting Shark Team Colleague

hello to all. we are in anchorage alaska and we seem to have a problem of being disconnected after about 5 min. of being on line and this is a problem all the time. i have been told that it is the timeout, and that it can be set to stop this problem, but nobody wants to tell how to do this unless we pay $200.00 or higher.We are getting frustrated, so please if anyone can help with this or if anyone knows what to do, it would be a very big help. we thank you all.

Who is your service provider? The means for dealing with this problem vary slightly on this--but here's one way: http://www.nidhin.com/internetconnectionkeeper.html

This was found by means of: http://www.google.com/search?q=keep+connection+alive

TallCool1 81 Practically a Posting Shark Team Colleague

My computer runs very slow after a while and it would become difficult to shut programs. I would then go to the task manager to close the program only to see that the cpu is running at 100% and it won't let me do anything.

AMD Anthlon 2600+
256MB
40GB HDD
64MB Geforce2 MX400

Which OS are you running? Which anti-virus? Have you checked for adware/spyware lately? Are you running the Windows fast-switcher PowerToy? Are you on broadband or dial-up? Are you using a firewall? Any weird toolbars, pop-ups, or changed start-pages lately?

Please help us help you. Read the malware article in m\y signature, below. If you feel that you are up to running HijackThis, post a log here before you try to fix anything. In any case, we need more information.

TallCool1 81 Practically a Posting Shark Team Colleague

Thanks for the advice. I'm not sure that I have a system restore feature due to the fact that I have Windows 2000 and not XP. Is there something different I should do?

Good point. It was not clear which NT version you are using, since you didn't provide that information. There are some differences under W2k. Try looking here or here, for starters.

TallCool1 81 Practically a Posting Shark Team Colleague

I have multiple files with real long names everytime I try to delete them I can't it says the file name is to long. I can't rename the files either. They are not in the temp internet folder either, they are in the temp folder under temp internet folder not sure why I have these folders in different areas. I am running win 2000 pro. I tried to delete them in safe mode also and still cannot.

There are several ways around this problem. The one that comes first to mind is to download an NTFS boot disk and use it to delete the whole directory from DOS, then re-create it as needed.

TallCool1 81 Practically a Posting Shark Team Colleague

I think that I've removed all of the viruses from my PC- the about:blank homepage problem seems to be fixed (once again). Here's my latest hijack this report- please let me know if you see anything weird in there.

Nope, you are still hijacked by a morphing program that changes the DLL name each time it installs. You are going to have to go deeper to rid yourself of this one.

* First, turn off System Restore before removing stuff. Some of your problems may be sneaking back in that way.

* Then make sure that HijackThis is the only thing running.

* Next, go into the folder C:\Windows\Prefetch, and look at the files there. Are any of them suspect? List the files here. You may even want to reboot your computer into Safe Mode and then delete all the files in your Prefetch folder at this time, just to be safe. Viruses hide there.

* While you are in Safe Mode, go into the C:\WINNT\system32 folder and remove those wierd-named DLL files that have been piling up.

* I would also manually clean out your Temporary Internet Files, as well. See Microsoft's Really Hidden Files for more on this issue (warning: potentially offensive site-name and email address). Though the article was written for Windows 98, it still applies.

Here's some more prevention tools:

SpywareBlaster -- blocks malware installation. Not a removal tool, helps keep adware and …

TallCool1 81 Practically a Posting Shark Team Colleague

Several days ago I asked for help getting rid of about:blank. I followed the recomendation to remove a number of things from my hjt log, and thought I had successfully fixed my problem. Alas, I had not.

After more research, I have come to the following conclusions.

* First, turn off System Restore before removing stuff. Some of your problems may be sneaking back in that way.

* Next, go into the folder C:\Windows\Prefetch, and look at the files there. Are any of them suspect? List the files here. You may even want to reboot your computer into Safe Mode and then delete all the files in your Prefetch folder at this time, just to be safe. Viruses hide there. This may be extreme, but so is your distress at this point.

Here's some prevention tools:

SpywareBlaster -- blocks malware installation. Not a removal tool, helps keep adware and spyware off your PC by blocking ActiveX for known malware. Updates available on a regular basis.

SpywareGuard -- detect spyware programs. SpywareGuard works similar to an anti-virus program, by scanning EXE and CAB files on access and alerting you if known spyware is detected.

IE-SPYAD: Restricted Sites List for Internet Explorer. Registry add-in that moves known malware sites to the "Restricted" zone in IE to block the nasties.

XP Anti-Spy -- turn off the "phone home" functions in XP. Did you know that Windows …

TallCool1 81 Practically a Posting Shark Team Colleague

I Fixed Checked All The Things You Guys Told Me
and I Deleted The Folder You Guys Told Me.

You have some old ones back and some new ones, as well. You will have to do a 3-step process this time.

First, turn off System Restore before removing stuff. Some of your problems may be sneaking back in that way.

Second, make sure that IE is not running. It's best to shut down all programs except HijackThis when fixing stuff.

Now on to the problems:

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://riviera.cc (obfuscated)

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://riviera.cc (obfuscated)

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.softwaretreasures.com/

R3 - Default URLSearchHook is missing

O4 - HKCU\..\Run: [Red Swoosh EDN Client] C:\Program Files\RSNet\RSEDNClient.exe

O4 - HKCU\..\Run: [zzb] c:\WINDOWS\System32\zzb.exe

O4 - HKCU\..\Run: [] c:\WINDOWS\System32\

Last, go into the folder C:\Windows\Prefetch, and locate a file named ZZB.EXE-something. Reboot your computer into Safe Mode and then delete the file. I would also recommend that you delete zzb.exe itself at the same time. You may even want to delete all the files in your Prefetch folder at this time, just to be safe. Viruses hide there.

Last, but not least, this is interesting. Why does it have two periods? Look in that folder and see if there are two files, Spoolsv..exe and …

TallCool1 81 Practically a Posting Shark Team Colleague

Ok I Fixed Checked All The Things You Guys Told Me and I Deleted The Folder You Guys Told Me.

You still (again?) have some problems. I gotta step away, I'll go through them when I get back.

TallCool1 81 Practically a Posting Shark Team Colleague

Every time I try and select either my computer, my documents , or control panel from the start menu all of my icons disappear and will eventually reappear but the computer does not open the selected item and will sometimes rearrange all desktop icons.

This is a common problem all of a sudden. It has been covered (and solved) here: http://www.daniweb.com/techtalkforums/thread5036.html

You should also follow the instructions and download and run HijackThis according to instructions. Post the log here, we'll take it from there.

TallCool1 81 Practically a Posting Shark Team Colleague

Why isn't the old video card compatable?

Older video cards which are AGP 1x/2x compatible operate at a higher signaling voltage than 4x/8x cards. Old card + new board = no workee. New card + old board = potential smoke.

TallCool1 81 Practically a Posting Shark Team Colleague

Several days ago I asked for help getting rid of about:blank. I followed the recomendation to remove a number of things from my hjt log, and thought I had successfully fixed my problem. Alas, I had not. Every day or day and a half I find that something has again set IE to about:blank. The guilty file changes each time--first it was ankli.dll, then hknilk.dll, then nadanp.dll, and this morning kgil.dll. If the create dates are accurate, these dll files are created right before I notice them. Finally, I have only been to what I consider fairly safe sites--e.g., NY Times, CNN, slate.com, and so on. There must be something still on my computer that from time to time generates a new take-over.

Your HjT log looks pretty clean. Judging by the pattern of DLL names, it would appear that you have a morphing virus of some sort that has been able to elude the virus checkers that you have used so far--not to mention HjT itself or a Google search. Have you cleared your IE cache, etc? I would also manually clean out your Temporary Internet Files, as well. See Microsoft's Really Hidden Files for more on this issue (warning: potentially offensive site-name and email address). Though the article was written for Windows 98, it still applies.

You might also try an on-line virus checker other than Trend Micro as a cross-check. Here's my list.

Another way to close the door …

TallCool1 81 Practically a Posting Shark Team Colleague

Ok This Is What I Did...I Made That Folder HJT in The C Drive i Saved HijackThis There And That Shredder....I Opend Them Bother From There (In Safe Mode) Then It Removed That Virants Things

There are some important problems that have been missed so far. The following are, at the very least, adware and should be removed:

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://imgfarm.com/images/nocache/f...etup1.0.0.6.exe

O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab

O16 - DPF: {886DDE35-E955-11D0-A707-000000521958} - http://69.56.176.78/webplugin.cab

O16 - DPF: {896DDE35-E955-11D0-A707-000000521958} - http://69.56.176.228/webplugin.cab

O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.aimphuck.com/Imbum_bw.cab

Here's why:

http://www.liutilities.com/products/wintaskspro/processlibrary/wupdt

http://webhelper.netfirms.com/transponders/buddyicons.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This one is highly suspect. Remove it separately and restore it from backup if it turns out that you need it:

O2 - BHO: (no name) - {134FB2C9-AB9D-D389-829A-CC3EE987D52D} - C:\WINDOWS\system32\hunaxbcu.dll

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Here's a resource waster. Remove it:

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

TallCool1 81 Practically a Posting Shark Team Colleague

I also have this problem, but cannot access the internet at all. I am using another computer now. Is there a way to take care of this with ie not working?

It looks like the Hungry Hands pr0n hijacker is hard at work again. It seems to be consistently causing this problem. I think there are two means of attack at your disposal which can probably be combined, as well.

One is to download the Mozilla browser on another machine, burn it to a CD, and install it to the target machine. You might also want to download Ad-Aware and/or Spybot - Search & Destroy. Be sure to download the data files and use them to update the detection before running either program.

Once you have run both, you are going to have to download and run HijackThis. Note: read the instructions on the linked page very carefully (the main download link is broken -- use one of the mirrors). Do not actually remove anything from your startup or Registry until you have posted the log that it generates and are given explicit instructions on what to remove. You should also read my article on this subject (in my signature below).

You also might want to download and install some free prevention measures, including SpywareBlaster and SpywareGuard. These will stop malicious ActiveX installs, a major part of your problem.

By having Mozilla, Ad-Aware, Spybot …

TallCool1 81 Practically a Posting Shark Team Colleague

Whenever I try to see an HTML source code in IE 6.0 it doesn't show. Anyone has an idea why?

Of course I tried right clicking on a website and also by clicking View | Source.

I'm not in Windows right now, so I can't check this, but, if I remember correctly, you can edit your preferences in IE to select which editor the page source opens in. By default, I'm pretty sure it's Notepad--so it is possible that either there is a problem with the settings, or Notepad itself.

TallCool1 81 Practically a Posting Shark Team Colleague

Here is a new hijackthis log.

The following should also be removed as useless resource wasters:

O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

For security reasons, you will also want to update Adobe Reader to v6.01 and WinZip to v9.0--or, better still, try the free 7-Zip instead.

TallCool1 81 Practically a Posting Shark Team Colleague

We have a Matsushita CW-7503 CD-R unit running with Iomega hotburn software and windows 98 OS. The problem is getting a blank cd-r recognized as a blank. Iomega troubleshooting guide suggests certain units only recognize certain color cd's. Does anyone know if this model is one of these units and if it is what color does it recognize? By the way, mostly data and pictures will be burned. Thank you in advance for any help.

To say that this drive is a moldy-oldie is putting it mildly. There are two likely possibilities: dirty optics, or disk compatibility problems. Newer blank CD-Rs have a different dye composition than older ones. You might want to try Verbatim brand discs--they have a darker, azo-based dye layer--which likely has a longer life, as well.

Your best solution is a new drive. With an 8x-write limit, no RW capabilities, and no buffer-underrun protection, your data deserves better. Even a cheap Lite-On ATAPI drive would be a better bet in the long run!

TallCool1 81 Practically a Posting Shark Team Colleague

When I log off, my screename for widows xp, i get 3 annoying boxes that pop up, -one of them saying, (RunDLL.exe......End Now) i forget what the other two are. Is there any way i can stop this. its very annoying. thank you

Does it say RunDLL.exe or RunDLL32.exe? The difference is important; it may be an indicator of a possible hijacking. RunDLL32 is supposed to launch-and-release under XP. If it fails to release (keeps running), it usually indicates poorly written malware. See my article Dealing with Malware (in my signature, below) on downloading and using HijackThis. Post the log here, but don't fix anything until instructed on what to remove.