Posts by caperjack

How exactly do they recover the files?? What would a program have to be written in to be a file recovery program?

Strange question ,i don't claim to know anything about computer languages but don't think what its written in will matter as much as what it told to do, that would make it a recovery program .
Steve Gibsons SpinRite is written in the Assembly language and is only about 120ks' but what a good program ,because of the fact that he knew what to tell it to do!! ,l just my comment on the question

the f2 is ok,I don't fully understand why it suddenly appeares in the log ,but i seached 8 logs with it in it from 6 different fourms and not one suggested a fix .so just leave it .it appeares to be releated to panda .

go the calc.exe in you system foler and right click it and copy ,then go to the documents ans settings folder on you c:\ drive open your user name or all users ,open start menu folder open programs folder ,open accessories and right click and paste it there .this will also work for the recorder

Right, thankyou again everyone and what a helpful website you have caperjack! Cool!

your welcome ,but the site isn't mine,Its Danis',our long lost daughter !LOL

This problem is Spyware related , go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-
HERE

one suggestion only ,never experienced this but simular problems ! totally unplug you computer from power source for a few min ,hold computer power button in while its unplugged ,then plug computer back into power source .

A hijackthis log will help maybe !

Glad to beable to help ,I reccomend and use these 3 programs ,Download and install these 3 programs to help you with stopping spyware .
http://subratam.org/?page=software&part=Spyware-preventions

what happens if I just scan and check the 06 box and click on "fix it"....
George

It removes that line and if you set the policie it will no longer be set !!
Sometimes spyware /malware programs will set a policies to ther eadvantage ,that why its the norm for us to check with you to see if you set it or maybe you used Spy-Bot Search and Destroy to set it .if you are not sure just leave it alone for now .

yeah you need a CD for sure !
so neither one worked when you typed it into Start/Run .

http://www.theeldergeek.com/xp_home_install_-_graphic.htm

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.
You might want to print out or copy & paste to notePad , these instructions as you will need to close this browser window to fix with hijackthis !

unless this is you start page fix it
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://kon4ay.biz/k/

Search results of this one > http://sarc.com/avcenter/venc/data/pf/adware.cwsconyc.html
R3 - URLSearchHook: transURL Class - {C7EDAB2E-D7F9-11D8-BA48-C79B0C409D70} - C:\WINDOWS\SYSTEM32\SEARCH~1.DLL

Info on this one > http://castlecops.com/clsid-1393.html
O2 - BHO: BL Class - {28F65FCB-D130-11D8-BA48-8BE0C49AF370} - C:\WINDOWS\SYSTEM32\POPUP_BL.DLL

Search for and delete those two DLLs if found
All else looks ok
reboot computer and post a new log

I think i could be wrong this exe on its own is CSWsearch ,but i after looking for info on it with autoupdate maybe it isn't sorry will keep checking
.O4 - HKCU\..\Run: [Autoupdate Service] C:\WINDOWS\msxmidi.exe

EDIT: did some more searching of that and no one is fixing it when its with the autoupdate service .

no not really just a general cleanup ,don't use them if you don't want to .
I have run them on at least 50 different computers from win95 to win xp pro and have never had a problem with them,and consider them the best to cleanup before really getting into picking apart the hijackthis log , .that why i suggest them ,but the choice is yours.

I could offer some advice but i don't know if you would follow it so i won't get to deep into the log but i would fix for sure
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocach...etup1.0.0.8.cab.

^ ok thanks let me get rid of that

OH .its not the only one that why i posted the links to trojan hunter and the online scan program along with spybot and a-aware . run those programs first to see what they remove and then post a new log .

O4 - HKLM\..\Run: [SafeGuard Popup Updater (required)] regsvr32 /s C:\WINDOWS\System32\PDF20f9.dll

Explanation !!
http://castlecops.com/startuplist-6474.html

thank you, but just before i do all that I want to tell you that ive already scanned with adaware, spybot, and spysweeper

ok just check the link to setting up ad-aware and tweek it if you didn't allready and scan again .

This one stuck out[O4 - HKLM\..\Run: [Popup Defence Updater] regsvr32 /s C:\WINDOWS\System32\pdfupd.dll] so i posted the tools i did !
info on that file is found here '
http://castlecops.com/startuplist-5746.html

click on the descriotion

I get this msg to send problems back to Microsoft
it keeps comming up and if i send or not after completed it kicks be out of what ever program i am in . How can stop this please help me.

thanks

You really don't need to keep posting the same question ,all over the fourm ,stick to one thread as most of us gheck out all sections !
Follow along in one of your orignal threads here .
http://www.daniweb.com/techtalkforums/thread18122.html

go to start /run type in calc.exe ,see if you calculator still works ,
sooy i don't know what you were using to record unless it was just the windows recorder,in that case type this ,sndrec32.exe into run and see if its still installed .
If they are installed and working come back and i will show you how to put them back in accessories .

If they are not still installed go to control panel ,add and remove programs and on the left side add.remove windows components ,click it open accessories and utilitys ,details /accessories, click details again and check to install calculator .if its install check to uninstall ok you wat back out then go back in and reinstall it .
I looked around in there and can't see the recorder install

Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-
HERE
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D. (Version 1.3)
Spybot
Unzip, and update. Install the updates and run. …

It would be great if you could help me get rid of some spyware that is on my computer. I was browsing a website and I clicked on something and my computer went crazy installing spyware. I have Spybot and Adaware, but neither of them can get rid of these programs and they keep reinstalling themselves. Thanks!

Make sure you have latest update on spybot and ad-aware ,and setup right .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal …

This on checks out as a coolweb vairant so please do the following then post a new log .
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from HERE

Loog looks ok to me ,
this one if you set the policies, if not you could fix it ,otherwise leave it
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
making sure all browser windows and only open program is hijack run a scan and fix it .

First use Spybot S&D. (Version 1.3)
Spybot
Unzip, and update. Install the updates and run. Delete all that it marks in red.
Reboot

Then it’s time for Ad-Aware
Ad-Aware
Install and update by using the globe icon. Restart your computer and run Ad-Aware.
Press scan now and select drives and/or partitions to be scanned. When done select all and click next. Remove all checked items and then reboot your computer.

Please go to this page and read the instructions for how to configure Spybot S&D & Ad-Aware
How To Setup Spybot SD and Ad-Aware

Doesn't sound to hard to do,so if i wanted to go and put 512 mb into my system would I just go to the store and buy the 512 mb there?Or does it have to be a certain one to match the 128 I have in my system?

My System is....

AMD Athlon XP 1600
1.39 GHz
128 MB off Ram

Motherboard,I have no idea what it is,is there a way to find out?

Thanks,
Ally

You really need to know the board ,so you can find out just what kind and how much it can take and in what combination
You can find this out by opening the case and look on the mothere board for a name and or number .

I have never used panda ,but you should be able to disable Panda auto protect ,amybe an icon down by the clock right click and disable auto protect untill you run hijackthis

Also do the following .
.........................
This problem could occur because of Spyware , go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Please do this.
Download 'Hijack This!'. HijackThis
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

3. Close ALL windows except HJT

4. SCAN with HJT

5. POST the new log in this thread using 'Add Reply'

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH

maybe ,when you get the error there should be details/show details to click on the get a bit more into before you click to send to microsoft ,clik it a wrte down what the info is

And don't forget spyware prevention .
http://subratam.org/?page=software&part=Spyware-preventions
Good Job Chrunchie ! those logs baffle me !!

First I didn't reall all you post just the first part about reinstall and Lsasser ,after a fresh install if you don't have and install SP2 or at least the right security patches before you go online you will immatetly get those trojan/worm . If you are connected to a direct internet connedctio when install windows you will get them even befor you finisjh the install ,as soon as windows install setsup the networking section .bang you got it unless you are behind a router firewall .
I would diconnect from the internet and reinstall againg ,but make sure you get sp3 or the securitys needed .
Security releated downloads ,you will have to use another computer no dought ,
http://www.microsoft.com/downloads/search.aspx?displaylang=en

Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-
HERE
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D. (Version 1.3)
Spybot
Unzip, and update. Install the updates and run. …

if you eye site is line mine watch out for those B s' that look like 8 s'

Hello,

I have recently received a portable word processor (dreamwriter 400) as a sort of castoff. It works, and I would like to use it, but I have no manual to guide me. I can figure out the processor itself, but it is supposed to be able to communicate with a PC via a serial null modem hookup. I have the serial cable and the modem (it has a variable baud rate setting) in the PWP seems to be working correctly but when I hook it up nothing happens. I believe that I have to have some sort of software on my computer for the two to communicate. Does anyone know what program I might try? The compnay that produced these (in Canada) is out of business so the only oprion is a generic program.

Any help is appreciated.

Thanks

kashkow1

soory i don't have a answer ,i searched and F ound some info and the name of the software it uses[Dreamlink]] but othing on where to get the software ,but ca contact to get parts and accessories maybe the have software ir suggestions ,
http://www.brainium.com/

this keep comming up and I dont know why
is there a way to stop it.

thanks

Out of the Blue !! what are you doing when you get the message !!
I been using a computer hooked to the net since 1997 and have never had such a brief error message "msg sent to microsoft " there must be more ,or else you have a direct connection to "Big Billl"

so in messenger have you gone to tools and cliked on the audio /video tuning wizzard ,to check the settings of the camera and mic.
if yes then why didn't you say so .!LOL

Well i don't follow it all but, to change to google search ,click on the search icon on the toolbar ,click customize .the auto search settings in the lower left of the screen ,you will see choose a search provider for auto search settings ,pick goole sites from the list .

2. How do I change these "protocols"? Mailto: seems to load Thunderbird fine, but about: needs to be changed to Firefox, and a few others need to be created. Is there a way to do this? If nothing else, can it be done with the registry?

If are in firefox go t otools and options and have a look around .You say About ,about what ! why would you creat a icon called about !!!

in bios check for system default settings or something like that ,iit usually the second one down the liast on the left side if there is two sides .you use the arrow keys to navagate around then hit enter ,then usually the + and - keys to change it ,then you save changes and exit

Getting hot problem maybe !!
Check inside to amke sure the CPU fan and powersupply fan and any other fans aren't full of dust!

make sure to unplug computer before installing ram just to be safe .and ground youself before taking the ram out of the static free bag that it should be in when you buy it !

You could try it in safe mode!
To get to safe mode use the F8 key while booting the machine. Detailed instructions from HERE

The Cyber Boogie Man :p

Go
Here and Get Trojan-Hunter Fully working trial!
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-
HERE

Things to look into when you are clean, please follow these simple steps in order to keep your computer clean and secure:

1. Use an AntiVirus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future.

   See this link for a listing of some online & their stand-alone antivirus programs:

   Virus, Spyware, and Malware Protection and Removal Resources

2. Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
   Antivirus
   
3. Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

   FIREWALL

   For a tutorial on Firewalls and a listing of some available ones see the link below:

   Understanding and Using Firewalls

4. Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available …

log look good hom the computer working now .

Im looking but don' have time to respond till later today . got to go to work

I've Done it with winxp pro and sp2 it workes great .

I don't understand why they have to develop/release/sell something new when the not so old ones still work... I mean, you have winXP, win98 and win2k... they're working fine as long as you don't screw them up yourselves, and they can be easily updated using service packs... I say don't fix it if it ain't broke... but then again, MS is in it for the money... :) just my 2c.

In it for the money ,They get very little of Mine
I bought 2 new computers since 1997 ,one with win95 ,latest with winxp home .
Not bad for over 7 yrs .

HELP!
REcently gone from dial up account with aol (9.0) to a broadband account with a different isp.
I have kept aol on the machine as a backup for dial up.

The problem is that when i receive an email with a hyperlink and click it, instead of opening up a new browser window using the broadband connection, it defaults to opening up a 'connection window' looking for aol connection via dial up!

When i manually open IE it opens no problem via broadband, email via OE6 is fine as well.
So why when links are followed in email messages does it look for the old aol account?

I guess there is a setting somewhere - i cannot find it!!

Any help please

What version of windows are you using

In IE go to tools .internet options /connections /and make sure never dial a connection is checked off ,or every option is greayed out .
Still in interneyt options go to programs and check off IE should check to see whether it the default browser .

the plot thickens...
In fact its beginning to be quite a challenge for the best techie out there.
I did an online scan on the webroot site. It found two adware spies and 52 adware cookies. Nothing too bad. I bought, downloaded and installed Spy Sweeper. I scanned my computer. We quarantined then deleted the 2 adware spies and the 52 adware cookies.

Yet the problem persists!!! :( aaaaaaaaaaaargh!!!

any one interested in this, cos it sure as hell is unusual!
(being as I'm new here, and dont know my way about yet, feel free to move this thread if you feel it is in the wrong forum)

cheerz

You don't need to buy programs to fix this ,all the ones we use here are free ,pleas get the hijackthis program advised in the previsous post by ,and scan and post a hijack this log .thanks
also click onthe icon to dial up and uncheck auto dial connection .

Hi ,I have a Bata copy and used it for a bit once when i had a spare drive to put it on ,looks a little different ,a lot of what is in SP2 is coming fro mLonghorn ,like the popup stopper and the 2 way firewall WMP 10 and some othere stuff .
one thing i remember when i first boot to it was this great big clock and calendar on the desktop that came about 2 1/2 " out from the right side .I hate things on the desktop that i don't need !!
I didn't get a chance t really do anything with it as the drive was just one i had for a few days !

Hello, this is my first post so thanks for any help you can provide. At work, I had about 350 Contacts in Outlook 2003. A coworker tried to sync his blackberry with the contacts and instead of taking them from the computer, he did the opposite, he managed to take the 15 contacts from his blackberry and put them into Outlook. So now I have 15 contacts and need to recover the original 350. Is there a way to do this or am I SOL? I thought about trying to find a PAB and import it, but I don't know the location on the hard drive? Should I do a search some way? Have I overwritten the contacts and screwed?

2yrs ago I worked at a call center tech support ,For Franklin Covey Planning software ,and it used Outllook and Palm desktop and hot sinc to transfer from the palm to the computer and we always had to make sure were the most upto date Data was ,on the HDrive of the palm ,because if we helped the customer over right it the wrong way we were screwed !Some people had up to 5 yrs of data on there palm and or computer, So I think yous in goneee and replaced with his.
With 350 contacts you really should have had a back up!!
if you did and its lost on the hddrive do a search for *.WAB