Jump to content

wizzkid

Members
  • Content Count

    160
  • Joined

  • Last visited

Posts posted by wizzkid


  1. Hi Wademan,

     

    Thanks for the reply. I already have SuperAnti-Spyware on my machine. I have ran all my anti-nasty programs & nothing has shown up. The programs I have ran are superantispyware, Adaware, A-squared, Spybot, AVG Anti-spyware, Hijackthis & CWShredder & my Anti-virus is AVG all updated regularly. So I presume it's nothing to worry about.

     

    Cheers

     

    Wizzkid


  2. Hi all,

     

    Just to let you all know I have been successful in my quest... If any of you have the same pain with Counterspy this is what I did.

     

    1. Downloaded & installed : Jv16 Power Tools, RegSeeker, Glary Utillities & CCleaner. (I had them on my pc already)

     

    2. Make a system Restore Point.

     

    3. In Safe Mode. Search > All files & folders > counterspy > when the search finds everything select it & delete it.

     

    4. Run regseeker "click clean registry" & delete everything to do with sunbelt counterspy. Then still in regseeker select "find in registry" in the search box enter counterspy then delete all in finds.

     

    5. Run JV16 Power tools Items for deleteion will displayed with a green dot at the side of it delete them.

     

    6. Run Glary Utillities delete what it finds

     

    7. Run CCleaner & delete what it finds.

     

    If I remamber correctly that is everything I did and my system has been running now for quite a few hours with no problems. ( touch wood it will continue to do so)

     

    Be careful I presume you could do some damage to the registry.

     

    Thanks,

     

    Wizzkid


  3. Hi Guys,

     

    Hope I have wrote this in the correct forum.....

     

    I was searching through my comp just now & in the find files & folders box I entered "Live" as I was searching to see if Windows Live Mail was on my system (I couldn't find it in my programs & I ams gonna need it in June for my hotmail account, so I thought I would get in now). Any way it found a folder called img.livejasmin.com this was located at C:\Documents and Settings\Pete\Application Data\Macromedia\Flash\Player\#SharedObjects\GR5985CN

     

    I know Livejasmin is a iffy site (sex stuff & what have you). I was just wondering if this folder should be there.

     

    Also I found a folder called "www.LiveVideo.com" which is also located in C:\Documents and Settings\Pete\Application Data\Macromedia\Flash\Player\#SharedObjects\GR5985CN to me that sounds iffy also....

     

    Are these folders OK or are they questionable stuff that should not be there.

     

    Cheers,

    Wizzkid


  4. Hi all,

     

    The other day I attempted to uninstall Sunbelt Counterspy. I discovered there was no entry for it in the add/remove programs list (no uninstaller either), so it came down to a manual unistall (don't like doing it) I deleted every single entry for counterspy from my computer even the registry with numerous cleaners but it continually came up with errors from counterspy (it isn't even on my PC, I thought). Luckilly I made a restore point & I restored my PC & the errors went away. I have removed counterspy from my startup menu using MSCONFIG, but I have discovered that it is running behind the scenes anyway. So I blocked it with my firewall and then errors appear and my PC freezes, the three finger shuffle won't even work. Anyway, does any one know of a uninstallation program that will get rid of the blighter totally, it's a pain in the booty.

     

    Thanks.

     

    Wizzkid


  5. Hi,

     

    Ok then lets have ago at giving some some decent information.

     

     

    When I serch for my computer as mentioned \\computer-name I find it. A window appears and there are two network folders in it. 1 named Public and 1 named Users. When I double click on users a window opens with three folders in it. 1 named Default, 1 named guest and 1 named public. When I double click on any of those folders a window opens with several folders in it such as favorites, my pictures, my music, documents ect. most of these folders are empty. Except one, which actually has folders in it from my PC not the laptop. So basically I am not able to see any of the folders from my laptop. I would have thought that a folder of my account name "Pete" would have been there so I could double click it and view that.

     

    Plus there is only my account & a guest account on the laptop, no public as far as I am aware.

     

    Hope this helps

     

    Thanks,

    Wizzkid


  6. Thanks brank20,

     

    That did the trick, like you say once I know it's working I can sort the security side out. There is still one little thing though. I still cannot share my files..................... My account does not show up on the list of users. The accounts that show are Guest & Default not me, so I still can't access my files.

     

     

    Thanks

     

    Wizzkid


  7. Hi,

     

    I have a very small wireless home network of 2 computers a PC running XP & a Laptop running vista. The PC is connected to the internet via a modem hardwired to a wireless router which is hardwired to the PC. My laptop is connected wirelessly. It works fine. The problem is, from my Laptop I can share files on my PC, but from my PC I cannot share the files on my Laptop. File sharing is turned on. When I search from my PC for a computer on my network it finds my Laptop, when I double click the icon a popup says "Laptop not accessable, the user has not been granted the requested logon type at this computer"

     

    I'm stumped I haven't got a clue what to do next, networking isn't my thing, I'm tolally new to it.

     

    Cheers, Wizzkid


  8. Hi,

     

    I did all you said and there was nothing found at all this is what the report said :

     

    ---------------------------------------------------------

    ewido anti-spyware - Scan Report

    ---------------------------------------------------------

     

    + Created at: 15:30:33 10/5/2006

     

    + Scan result:

     

     

     

    Nothing found.

     

     

    ::Report end

     

     

     

    Thanks for your help, Wizzkid


  9. Hi all,

     

    Could some one please take a look at this log for me and let me know if it is ok. Just a minute ago I ran a scan and just out of interest I looked at, O20 - Winlogon Notify: SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll and readup about it & apperently these .dll's are rarely ever used except by trojans could this be one.....

     

     

     

     

     

     

     

    Logfile of HijackThis v1.99.1

    Scan saved at 15:28:22, on 10/2/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

    C:\WINDOWS\system32\CTsvcCDA.exe

    C:\Program Files\Common Files\Command Software\dvpapi.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

    C:\Program Files\Norton Utilities\NPROTECT.EXE

    C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe

    C:\Program Files\Speed Disk\nopdb.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wdfmgr.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\ehome\mcrdsvc.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\WINDOWS\System32\alg.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\ehome\ehtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    C:\WINDOWS\system32\Rundll32.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe

    C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

    C:\Program Files\Ashampoo\Ashampoo AntiSpyWare\AntiSpyWareGuard.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\eHome\ehmsas.exe

    C:\DOCUME~1\Pete\LOCALS~1\Temp\clclean.0001

    C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

    C:\Program Files\Ashampoo\Ashampoo AntiSpyWare\AntiSpyWareControl.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\HijackThis\HijackThis.exe

     

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - (no file)

    O2 - BHO: (no name) - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - (no file)

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    O4 - HKLM\..\Run: [MBMon] Rundll32 CTMBHA.DLL,MBMon

    O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r

    O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

    O4 - HKLM\..\Run: [Ashampoo AntiSpyWare Guard] C:\Program Files\Ashampoo\Ashampoo AntiSpyWare\AntiSpyWareGuard.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204

    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -

    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15023/CTPID.cab

    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

    O20 - AppInit_DLLs:

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

    O20 - Winlogon Notify: SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

    O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

    O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe

    O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Utilities\NPROTECT.EXE

    O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

    O23 - Service: Speed Disk service - Symantec Corporation - C:\Program Files\Speed Disk\nopdb.exe

    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


  10. Hi,

     

    After all the help you have received this is a total different direction:

     

    You mentioned that you have Adaware and run it regularly.....

     

    Have you got spybot: http://www.majorgeeks.com/download2471.html

     

    Have you got Hijackthis : http://www.spychecker.com/program/hijackthis.html

     

    (Introduction) : http://tomcoyote.com/hjt/

     

    If not download, Update & run them & post us a Hijacklog to look at.

     

    Do not delete anything from the hijack list most things here will be needed for the machine to run.

     

     

    When you run Spybot delete what it finds.

     

    Spybot will offer to make a registry backup, it is recommended that you do.

     

     

    Reboot your system before you run Adaware, as Spybot & Adaware conflict if not done.

     

    Wizzkid


  11. Hi Guys,

     

    Anybody else having problems updating AVG again. I have done the fix several weeks ago and everything worked fine, then all of a sudden I am unable to update, even from the update page at grisoft.

     

     

    Wizzkid


  12. Hi,

     

     

    Windows XP

    Display Hidden Files

    Click Start, click Control Panel, and then double-click Folder Options.

    Click the View tab.

    Under Advanced settings, click Show hidden files and folders.

    Under Advanced settings, click to clear the Hide protected operating system files (Recommended) check box.

     

    Note Hidden files and folders will appear dimmed. Hidden files are program or system files that typically should not be deleted or changed.

    Delete Temporary Internet Files

    Use the Windows Disk Cleanup Wizard to clear your Temporary Internet Files. To do so:

    Click Start, and then click Run.

    In the Open box, type cleanmgr.

    Click Temporary Internet Files, and then click OK.

    Delete Files from Windows Update Folder

    On the Windows desktop, double-click My Computer.

    Double-click drive C.

    Double-click the Program Files folder, and then double-click the WindowsUpdate folder.

    Click the V4 folder, click Edit, click Invert Selection, and then press DELETE.

     

    Note If you cannot find the V4 folder, click Edit, click Select All and then press DELETE. Skip steps 5 and 6.

    Double-click the V4 folder.

    Click the Iuhist.xml file, click Edit, click Invert Selection, and then press DELETE.

    Remove the Windows Update ActiveX Controls

    Click Start, and then click Search.

    Click More Advanced Options, and then click to select the Search hidden files and folders check box.

    Type iuctl.dll and iuengine.dll, and then click Search.

    If these files are found in your C:\Windows\System32\Dllcache folder, delete them.

    If these files are found in any folder other than C:\Windows\System32, delete them.

    After you have deleted all other copies of these files, delete them from the C:\Windows\System32 folder.

    When you are prompted to insert the Windows XP installation CD-ROM, click Cancel.

     

    Note You will download newer versions of the files from the Windows Update Web site.

    When you are prompted to answer if you want to keep the unrecognized file versions, click Yes.

    Visit the Windows Update Web site and install new copies of the ActiveX controls.

    Windows 2000 and Windows Millennium Edition

    Display Hidden Files

    Click Start, click Control Panel, and then click Folder Options.

    Click the View tab. Under Hidden files and folders, click Show hidden files and folders.

    Click to clear the Hide protected operating system files (Recommended) check box.

    Note Hidden files and folders will appear dimmed. Hidden files are program or system files that typically should not be deleted or changed.

    Delete Temporary Internet Files

    Close all programs and Internet Explorer windows.

    In Control Panel, double-click Internet Options.

    Click the General tab.

    Under Temporary Internet Files, click Delete Files, and then click OK.

    Close Control Panel. Restart for the changes to take effect.

    Delete Files from Windows Update Folder

    On the Windows desktop, double-click My Computer, double-click drive C, double-click the Program Files folder, and then double-click the WindowsUpdate folder.

    Click the V4 folder, click Edit, click Invert Selection, and then press DELETE.

     

    Note If you cannot find the V4 folder, click Edit, click Select All and then press DELETE. Skip steps 3 and 4.

    Double-click the V4 folder.

    Click the Iuhist.xml file, click Edit, click Invert Selection, and then press DELETE.

    Remove the Windows Update ActiveX Controls

    Click Start, then click Search, and then click For Files or Folders. Search for files named Iuctl.dll and Iuengine.dll.

    If these files are found in the C:\Windows\System32\Dllcache folder, delete them.

    If these files are found in any other folder, other than C:\Windows\System32, delete them.

    After you have deleted all other copies of these files, delete them from the C:\Windows\System32 folder.

    Visit the Windows Update Web site to install new copies of the ActiveX controls.

    Windows 98

    Display Hidden Files

    Click Start, click Settings, and then click Folder Options.

    Click the View tab.

    Under Hidden files and folders, click Show hidden files and folders, and then click OK.

    Delete Temporary Internet Files

    Close all programs and all Internet Explorer windows.

    In Control Pane, double-click Internet Options.

    Click the General tab.

    Under Temporary Internet Files, click Delete Files.

    Click OK.

    Close Control Panel. Restart for the changes to take effect.

    Delete Files from Windows Update Folder

    On the Windows desktop, double-click My Computer, double-click drive C, double-click the Program Files folder, and then double-click the WindowsUpdate folder.

    Click the V4 folder, click Edit, click Invert Selection, and then press DELETE.

     

    Note If you cannot find the V4 folder, click Edit, click Select All and then press DELETE. Skip steps 3 and 4.

    Double-click the V4 folder.

    Click the Iuhist.xml file, click Edit, click Invert Selection, and then press DELETE.

    Remove the Windows Update ActiveX Controls

    Click Start, click Find, and then click For Files or Folders. Search for the files named iuctl.dll and Iuengine.dll.

    Delete all copies of these files.

    Visit the Windows Update

     

     

    http://support.microsoft.com/default.aspx?...kb;en-us;319585

     

     

    Wizzkid


  13. Do you mean the file is available, but will not delete, rename, or be dragged & dropped to the recycle bin? If so try renaming the file. I have had this problem on several occasions & when it was renamed to a very short file name ie. 1 digit, I was able to delete the blighter.

     

    The program I used to do this is 123renamer. There are many others around.

     

     

    Wizzkid


  14. I hate when they don't get back here and say it worked, it didn't work, it blew up my machine, go to he!! or somthin'

     

    Not lookin for pats on the back, would just like to know if we helped or if the cops are gonna come knockin on the door.

     

    I agree totally.

     

     

    Wizzkid

×
×
  • Create New...