Posts by kylethedarkn - Page 3

Oh its probably Ccleaner then. Also the AVG log only found some cookies.

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 8:12:13 PM 11/19/2007

+ Scan result:

:mozilla.118:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.119:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.120:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.121:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.122:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.140:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.141:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.142:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.273:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.274:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.275:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.276:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.277:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.278:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.279:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.164:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.165:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.166:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.167:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.168:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.49:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.72:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.73:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.77:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.

Ok I deleted cemetrix.dll
And I have no idea what game that would be for.

Anyways I already have AVG and I ran a scan but I'll do so again.(Oh and yes I have AVG Anti-spyware and anti-virus so don't get confused there, I'll runt he anti-spyware)
It does take an extremely long time though.

Also a new symptom.

No matter what I change manually my computer keep changing everything in C:\ to Read-Only and keeps changing back to
-Do not show hidden files
and put the checkmarks back next to
-Hide known file extentions
-Hide system files/folders

So I don't know whats wrong with that. Thanks for your time though.

Ok, I see you have Limewire, which is a great program but tends to give alot of people things they don't want on there computer. Also you have it set to run on startup which means people are constantly downloading things from your computer from the moment you turn the computer on, so I would recommend not having limewire run on startup.

You also have Viewpoint which is relatively harmless but still annoying.

Lets get started, first open control panel and then add/remove programs. Find the following and remove them.

Viewpoint
Pokerstars
Bogdog Poker
and Partypoker

Now run HiJackThis and place a checkmark in the box next to the following.(Note* some may not be there now)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarBHO.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.8.0\IEViewBar.dll
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe
O23 - Service: Viewpoint Manager Service - Viewpoint …

Checked read-only
tried cmd prompt already

Unlocker worked like a charm thanks.

Sorry. Meant to put I've never seen Linux. My bad. Plus I would have to go through the whole ordeal of switching operating systems.

Gotta love Windows security...lol

A while ago I made and ISO copy of a Dvd so that I could keep a version on my computer, but unfortunetly it failed and now I have a worthless 8.6gig ISO image in my documents. I have tried deleting it normally and with pocket killbox and neither has worked. Does anybodyhave any suggesstions as to how I can delete this?

Love this one.

Question 4
Windows is nagging you to update the operating system. What do you do?

C: Update every six months. Just to keep Microsoft happy

A little tid bit of info, there is a way to edit Firefox to get rid of the download limit, I'm not gonna tell you but just google it, and if you don't have firefox...get it!

I like it because of its flaws, they make it fun to explore and manipulate. Plus the fact is supports the most software out of all of the OSs, so thats why I use it, oh and the fact that I hate the layout of Macs and I've seen Linux.

The link for download.bleebingcomputer.com works fine, but the program comes up stating it is expired.

Yes unfortunetly its not working right now, and until the updated version is out it won't work, so just skip that part in his instructions. :icon_lol:

I would love to have you download combo fix and use that to give me a more in depth scan to work with, but unfortunetly its not working right now, so lets do something a little bold and just have you run some programs for what you might have.

First, Please download VundoFix.exe to your desktop.

* Double-click VundoFix.exe to run it.
* Put a check next to Run VundoFix as a task.
* You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
* When VundoFix re-opens, click the Scan for Vundo button.
* Once it's done scanning, click the Remove Vundo button.
* You will receive a prompt asking if you want to remove the files, click YES
* Once you click yes, your desktop will go blank as it starts removing Vundo.
* When completed, it will prompt that it will shutdown your computer, click OK.
* Turn your computer back on.
* Please post the contents of C:\vundofix.txt

And the code if you want it.

Second, Download SmitfraudFix (by S!Ri)
- Extract the content (a folder named SmitfraudFix) to your Desktop.
- Run Smitfraud fix and when prompted select option 1. This should pop up a notepad document at the end, save that and post it in you next post.

Finally, rename HJT to something random …

Ok Pandascan finally done and all it found were some tracking cookies and some stuff in the FF cache which I'm cleaning right now. The last spyware it list on the log was created in 2005 and doesn't look malicious so I don't think I'm gonna delete that yet, and all the other most of the other stuff are tools I downloaded. The only thing that looks malicious is the registry things and the two generic viruses at the bottom.

Incident Status Location

Adware:adware/popper Not disinfected Windows Registry
Adware:adware/commad Not disinfected Windows Registry
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.com.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.atwola.com/]
Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.adultfriendfinder.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\avpgw1s6.default\cookies.txt[.

And yet another problem arises. I can no longer access daniweb with firefox from my comp so now im using my other one. I didn't want to risk crashing IE because of the scan. So I don't know what this means, i cant see any reason why i shouldn't be able to access daniweb on my comp with ff bux..oh well.

ah ok np then.

ok thanx man i really needed that thanx

So does that mean it worked? Or are you just happy to get a temp file cleaner?

I don't see anything malicious in your log. Just a little clean up thing I want you to do.

Run HJT again and place a checkmark in the box next to the following.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

Now click fix checked.

Try cleaning out your temp folders.

Begin by downloading CCleaner, and specifically choosing the most recent version.

Then, follow these steps:

1. Close all programs so that you are at your desktop.
2. Double-click on the "My Computer" icon.
3. Select the "Tools" menu and click "Folder Options".
4. After the new window appears select the "View" tab.
5. Place a checkmark in the checkbox labeled "Display the contents of system folders".
6. Under the "Hidden files and folders" section select the radio button labeled "Show hidden files and folders".
7. Remove the checkmark from the checkbox labeled "Hide file extensions for known file types".
8. Remove the checkmark from the checkbox labeled "Hide protected operating system files". 9. Press the "Apply" button and then the "OK" button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.

Now, install the program. Open it, and choose the 'Options' tab. Inside, hit the 'Custom' tab, and add the following folders (Note: Not all of these files are on every computer. If one of these isn't present, skip it):

C:\Windows\Temp
C:\Temp
C:\Documents and …

The Panda scan gonna take awhile.(I got alot of stuff on my comp), but thats not why im posting. When I try and run combo fix it comes up with an abort window and says the date is 2007-11-18 this version is expired, please download the newest version. Then it uninstalls itself and crash firefox. I have already googled it and tried a couple different downloads but they all do the same thing. I was wondering if you know whats wrong with my comp, and or if you have the link to this new version?

Yayaymm please make your own thread with a title that tells us what your problem is. Please do not "piggy back" off other peoples threads. Thx

Ok lemme take a crack at this one. Bare with me its been awhile since my last hjt log.

Ok first run hjt and place a checkmark in the box next to the following.

O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

Now close all other windows and hit fix checked.

Ok now open task manager(hit alt+ctrl+del at the same time) and end the process flashget.exe

Now go to control panel>add/remove programs and look for flashget or anything similar and uninstall them.

Now open My Computer and navagate to C:\Program Files\ and delete the flashget folder.

Now scan with HJT again and post the new log here. Also tell me if your still having problems.

Ok so here my problem. A couple days ago I found out that I had stupidly and unknowingly download some keyloggers. Not a big problem cuz I don't really have anything important they could get but still bad so I got rid of them. I ran AVG anti-spyware and andti-virus and it worked fine. Next thing I did that was stupid was go onto a download site using IE, bad idea. I got a nasty little program call adssite on my computer with nasty little recreating dll files. I got rid of that using HJT, AVG, and CCleaner. But now heres my real problem starting two days ago my computer has froze several times, about 4. This has never happened before. The situations were as follows. 1. I had several tabs open in FF, no more than usuall but when i tried to click another tab the comp froze completly, including no mouse movement or anything. 2+3. I tried to enable the ethernet connention in network connections and it froze. I could move my mouse but couldn't open any programs and all the windows and desktop were unresponsive. This I found out is because the PCI ethernet card I had in my comp was no longer being recognized by my comp. I don't know if the card just burnt out or if the driver got messed with. 4th time was when I tried to get a wireless connection while running a scan with AVG. it froze again, I couldn't move …

If you need help please make a new thread w/ your problem in the title. Don't piggyback off other peoples threads it keeps it less confusing that way.

sharath_53543 Next time please don't piggyback off other posts. At Daniweb if you have the same problem as someone else just make a new thread. That way everything remains organized. Also this thread is almost 7 months old. I am currently a little too busy to do much on Daniweb so please make a new thread with a similar title and somebody will help you.

I've actually already done that as well as run registry mechanic.

I was having the exact same problem with my emachine a few years ago. Both of the fans broke and it was over heating every 10-15min, and on reboot it came up with a similar error to yours. Try opening the side of the CPU and see if the increased air flow keeps the comp from shutting down. If it turns out you have to replace the fans i would just get a new comp. But thats just me.

Hmm. Well on my comp the back up CD works like the windows CD for repairing and such. Have you tried to use the backup CD for the repair,if not then try it. One option would be to get a floppy drive and attach it to your computer but that would cost some cash so that wouldn't be the best. Also have you tried booting into safe mode? If you haven't try and see if it will work.

My Computer has randomly started applying Read-Only properties to all the folders in my C:\ drive including subfolders. I am able to unapply the readonly attribute, but after i do it comes back after about 10mins. This has been very annoying because when i try to download anything and save it to my documents it doesnt let me because the readonly atrribute has been reapplied.

I have ran scans with AVG Anti Spyware and Virus, and i have also checked over my HJT log and both are fine. I haven't done anything that would have caused this either so I wondering what happened?

Did you sucessfully removal the toolbar with those instructions? Also could you include the beginning part of the HJT log.

Like i said to nelly if you are having the same problem please make a new thread and someone will look at it as soon as possible.

You should get all the necessary updates for AVG then the firewall should enable itself. Also make sure that the Windows Firewall is off.

I don't think that this problem is being caused by malware so i think you should try posting a new thread in the windows XP section of the windows forums. Thx.

LOL.. I can't believe i didn't realize this sooner. I think i have found the reason google things stop working. This happened to me a couple years ago and it was because of Norton Anti-Virus(The worst one of them all). Here a link to when this happend to me.

Heres what you should do first go here and follow the instructions to remove Norton from your computer.

Then get another better Anti-virus program like MaCafee or AVG Anti-virus.(Just google one of them. I recommend AVG)

In your next post tell me if this worked. If not then all i did was get you a better anti-virus, but this procedure worked for me.

sorry about the delay, i was sick for the last few days so I couldn't get out of bed.

Anyways, your HJT log looks clean.

I have a questions though.
Can you access the internet via Mozilla Firefox?

Also you have two Anti-Virus Programs running at once(PcTools and Nortan) which can be bad. Which one is the one you want to use?

I would also try opening Internet Explorer and going to Tools>Reset Web Settings.

Okay I want you to run a quick scan. It will help me determine what we still need to get rid of.

Please download and install ewido anti-spyware tool(Now called AVG Anti-spyware)

• Close all other Applications Select language click Ok
• Click I Agree
• Click next
• Click Install
• Click Finish
• Wait Ewido will open main screen automatically.
• Wait again a few minutes and Ewido Should Auto update itself. If it doesn't click update at top of screen.
• This in very important to get updates
• When updating has finished. Close Ewido.

If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.

• Next, please reboot your computer in Safe Mode by doing the following:
• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
• Instead of Windows loading as normal, a menu should appear use arrow up to highlight
• Select the first option, to run Windows in Safe Mode hit enter.
• For additional help in booting into Safe Mode, see the following site: HERE

  You MUST manage to get into Safe Mode for the fix to work.

Make sure to close all open windows/programs/folders. Have nothing else open while ewido performs its scan!

• Open Ewido
• Click on scanner top of Ewido sceen
…

>I've seen real anime and it wasn't as entertaining as Adult swim animes.
Naruto, DBZ, and Inuyasha (as examples) weren't on Adult Swim. They're on Toonami, which tends to focus on kids anime that also often happens to be sub-par. Oh, and just because some people like cheap wine doesn't make it good. The same goes for bad anime. :)

Inuyasha was on adult swim, adn DBZ was still a good show no matter what age group it was aimed at.

And the dubs on Adult swim don't suck i'm pretty sure FMA dubs won some kind of award and the GITS SAC dubs were amazing as well.

Only ~s.o.s~? :'( But yes, this thread is really funny when everyone comes up naming stuff from Cartoon Network or their local equivalent. :P

Pssh...Says you guys. I've seen real anime and it wasn't as entertaining as Adult swim animes.

Ok I want you to do two things

First run HJT again and place a checkmark next to the following.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O1 - Hosts: HP90DB42 HP0018FE90DB42
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE(Not bad but takes up alot of memory.)
O20 - AppInit_DLLs:

Now click fix checked.

Next i want you to run the following scanner.

Please download and install ewido anti-spyware tool(Now called AVG Anti-spware)

• Close all other Applications Select language click Ok
• Click I Agree
• Click next
• Click Install
• Click Finish
• Wait Ewido will open main screen automatically.
• Wait again a few minutes and Ewido Should Auto update itself. If it doesn't click update at top of screen.
• This in very important to get updates
• When updating has finished. Close Ewido.

If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.

• Next, please reboot your computer in Safe Mode by doing the following:
• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
• Instead of Windows loading as normal, a menu should appear use arrow up to highlight
• Select the first option, to …

why

Huh?

And computer crazy that isn't a complete log. After the running processes there should be more that start with R0, R3, 02, 04 and ends with 023 entries. Make sure you copy and paste the entire notepad document.

Download HiJackThis from here.

Make a new folder called HJT in the C: directory(C:\HJT) Extract the zip contents to that folder. Run HJT and select the scan option. After it finishes scanning there should be a save log button. Once clicked it should open up a notepad file with the log. Copy and Paste the contents of the note pad file in your next reply.

Hmm.. All i see in your log is viewpoint so lets get rid of that.

First go to Control Panel>Add/Remove Programs and remove anything with viewpoint in it.

Now delete the following folder.
C:\Program Files\Viewpoint\

Now run HJT and place a checkmark next to the following.

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank

Now click fix checked.

AFter that i want you to run the following scan.

Please download and install ewido anti-spyware tool(Now called AVG Anti-spyware)

• Close all other Applications Select language click Ok
• Click I Agree
• Click next
• Click Install
• Click Finish
• Wait Ewido will open main screen automatically.
• Wait again a few minutes and Ewido Should Auto update itself. If it doesn't click update at top of screen.
• This in very important to get updates
• When updating has finished. Close Ewido.

If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.

• Next, please reboot your computer in Safe Mode by doing the following:
• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
• Instead of Windows loading as normal, a menu should appear use arrow up to highlight
• Select the first option, to run Windows in Safe Mode …

Seems we're both wrong. After reading up on the issue i may have found a solution. It seems that having many Internet Explorer windows open it what causes it. I recommend using Mozzilla Firefox instead of IE. It is more secure and offers better features. I also think its faster. You can get it here. To fix you comp do the following.

To make this change, navigate regedit to HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\SubSystems. The “Windows” value contains a big honkin’ string, and one part of it is “SharedSection=xxxx,yyyy,zzzz”. The second number (yyyy) is the one that you want to increase.

I also had norton for a while, but it was terrible so heres what i did. I got AVG anti-spyware and AVG-anti-virus(both firewall and virus scanner) You can get both of those here. You can also get a norton removal tool(which you'll probably need to get rid of norton) here.

Tell me if that registry edit worked in your next post.

I like Yu Yu hakusho.. its kinda like DBZ.. but some episodes are damn funny.. Any yu yu hakusho fans here?

Woah i almost forgot about yu yu hakusho. That show was pretty damn good. For the first season at least, cuz i never saw the second season. Also I like Samuri champloo as well.

lol my bad. I never use IE so i forgot the exact process name. That could of been bad though, so thx jbennet.

iexplorer.exe is Internet Explorer, which is the web browser your using right now. You shouldn't get rid of because you need it.

I thought it was pretty funny actually. Of course i'm the kind of person that only cares about my feelings. I could see how this would ruin your day. But for the people doing the paintballing fun; for the people getting shot annoying.

Wouldn't of been that bad if i didn't have my volume on max. Scared the S%&% outta me.

Heh. Good thread. As you might have noticed from my sig and avatar my favorite anime is Ghost in the Shell. After that its Full metal alchemist followed by inuyasha and Eureka 7.

Well I have Utorrent and Firefox, and it is completely normal for Utorrent and massive amounts of FF tabs to make your computer run slower. There is actually a setting in FF that you can enable so it will tell you when your speed will be affected if you open more tabs.

Please download HiJackThis using the guide found here. Run it and post the log it produces in your next post.

Hmm..I don't know much about Vista, but the limit on the number of windows you can open might be set by Microsoft or you might not have enough RAM to open more than that number of windows. Other than that are you having any problems? Because I don't think that the window thing is malware related.

Actually i just noticed something in your log that i missed the first time that might fix the problem.

Run HJT and place a checkmark next to the following entry.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8081

Now click fix checked.

See if that will let you use IE.