Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 



Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > General Computer Security
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


General Computer Security Get Help With System Security - This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the Virus/Trojan/Spyware Help forum, or the "First Steps" link at the top right of each page.

Reply
 
LinkBack Thread Tools
Old 10-25-2006, 04:33 PM   #1 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


favorites

Hi can any one help with this one
my wife was surfing the net and a load of new favorite folders have poped up and i cant get rid of them
when i click on them nothing happens and when i try to right click and delete nothing happens either
how can i get rid of these
any help would be much appreciated
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 10-25-2006, 04:46 PM   #2 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
Hi there,
what are they called?

Most probably to do with malware, browser hijack. Go through the 'Having problems with spyware/viruses' steps in my sig and post a HJT log where instructed in my sig.
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-26-2006, 03:20 AM   #3 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


Hi Joefireline
here is my HJT
Logfile of HijackThis v1.99.1
Scan saved at 09:52:27, on 26/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iolo\System Mechanic Professional 6\PopupBlocker.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Hijack this,HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneDVDElbyDelay] "C:\Program Files\Elaborate Bytes\CloneDVD\ElbyCheck.exe" /L ElbyDelay
O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic Professional 6\delay.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [System Mechanic Popup Blocker] "C:\Program Files\iolo\System Mechanic Professional 6\PopupBlocker.exe"
O4 - HKCU\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe"
O4 - HKCU\..\Run: [Time Poke] C:\DOCUME~1\DAD~1.HOM\APPLIC~1\CREATI~1\OPTIONEQUPLOAD.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1158338303812
O16 - DPF: {9BFC2253-B9D9-477E-9488-CA450232620D} (BinAg1 Class) - http://www.blueyonder.co.uk/assets/e...ActiveXCab.CAB
O18 - Protocol: bw+0 - {153C00AA-ED46-434D-9B13-ABB38DEB4EC9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-26-2006, 03:53 AM   #4 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
Hi again,
you will need to post that HJT log in the HJT log help section: http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/

though, I had a quick look through it and couldn't find anything bad. Post it in that section anyway.

What were the favourates called?

Go to My Computer, C:, Documents and Settings, *user name*, Favourates. Are they in this folder? Can you delete them from this folder?
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-26-2006, 03:44 PM   #5 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


hi Joefireline
this is what installed on my computer and
attached them selves to my favorites ( they are COOL STUFF/folder TRAVEL/folder SHOPPING GIFTS/folder INTERNET/folder COMPUTERS/folder ONLINEGAMING/folder COMPUTERS/web address MOVIE/web address GAMES/web address WEBHOSTING/web address CASINOONLINE/web address ) they are not in my favorites in C drive and i cant delete them
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-27-2006, 05:07 AM   #6 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
I see you have google toolbar, did you install this?
Try going to add/remove programs in control panel and remove google toolbar. I see you also have Windows Live Toolbar, remove this too.

Also, did you check all users for the favourates as well?
My Computer > C: > Documents and Settings > All Users > Favourates.

Please click on favourates in IE, and print screen it for me.
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-27-2006, 12:27 PM   #7 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


Hi Joefireline
did what you asked
dont know how to print screen in IE with favorites in
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-27-2006, 12:32 PM   #8 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
Ok,
on your keyboard, there will be a button called 'Print Screen' or 'PrtSc', press it with Internet Explorer open, and favourates up, though if it is one with 'SysRq' underneath, press Shift and that key. Now open up paint, or another photo editing program, and press 'Ctrl' and 'V', or right click and paste or edit and paste. Save it, and attach it to a message.
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-27-2006, 02:30 PM   #9 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


Hi Joefireline
did what you asked
i looked in> C: > Documents and Settings > All Users > Favourates.
there is nothing there and when i try to right click and delete these folders nothing happens it doesnt give me any options to do any thing and when i go into organise favorites there is nothing there
here is a snap shot of my favorites
i am trying to upload the snap shot of my favorites but it wont let me ???????
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-27-2006, 05:32 PM   #10 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
Quote:
Originally Posted by mrbloby View Post
Hi Joefireline
did what you asked
i looked in> C: > Documents and Settings > All Users > Favourates.
there is nothing there and when i try to right click and delete these folders nothing happens it doesnt give me any options to do any thing and when i go into organise favorites there is nothing there
here is a snap shot of my favorites
i am trying to upload the snap shot of my favorites but it wont let me ???????
So when you go to 'Manage attachments' and click upload, what does it say?

Try:
Go to www.imageshack.us , click on 'Browse...', find the image, click on it, then click on 'host it!'. Copy the link on 'Hotlink for forums (1)', paste('Ctrl' and 'V') it to this message and send.
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-28-2006, 05:41 AM   #11 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2


Hi Joefireline


[img=http://img95.imageshack.us/img95/8339/favorites1ug7.png]
there is a snap shot of my favorites and a snap shot of a screen thet i get every time i try to get on the net it wont let me
i have to turn my modem off then keep trying till it lets me
many thanks mrbloby
mrbloby is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Old 10-28-2006, 11:45 AM   #12 (permalink)
Enthusiastic TSFer~Joseph
 
Joefireline's Avatar
 
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)

My System

Send a message via MSN to Joefireline
Judging by what Deckard has posted here: favorites , this is likely the problem. When Deckard has gone through everything, and done everything he can, post back with the results, weather it has cleared or not.
Joefireline is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT -7. The time now is 02:49 PM.



Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85