![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| General Computer Security Get Help With System Security - This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the Virus/Trojan/Spyware Help forum, or the "First Steps" link at the top right of each page. |
![]() |
|
|
LinkBack | Thread Tools |
|
|
#1 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2
|
favorites
Hi can any one help with this one
my wife was surfing the net and a load of new favorite folders have poped up and i cant get rid of them when i click on them nothing happens and when i try to right click and delete nothing happens either how can i get rid of these any help would be much appreciated |
|
|
|
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
|
#2 (permalink) |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
Hi there,
what are they called? Most probably to do with malware, browser hijack. Go through the 'Having problems with spyware/viruses' steps in my sig and post a HJT log where instructed in my sig. |
|
|
|
|
|
#3 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2
|
Hi Joefireline
here is my HJT Logfile of HijackThis v1.99.1 Scan saved at 09:52:27, on 26/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\iolo\System Mechanic Professional 6\PopupBlocker.exe C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe c:\progra~1\intern~1\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Hijack this,HJT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68" O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [CloneDVDElbyDelay] "C:\Program Files\Elaborate Bytes\CloneDVD\ElbyCheck.exe" /L ElbyDelay O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic Professional 6\delay.exe O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO O4 - HKCU\..\Run: [System Mechanic Popup Blocker] "C:\Program Files\iolo\System Mechanic Professional 6\PopupBlocker.exe" O4 - HKCU\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe" O4 - HKCU\..\Run: [Time Poke] C:\DOCUME~1\DAD~1.HOM\APPLIC~1\CREATI~1\OPTIONEQUPLOAD.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1158338303812 O16 - DPF: {9BFC2253-B9D9-477E-9488-CA450232620D} (BinAg1 Class) - http://www.blueyonder.co.uk/assets/e...ActiveXCab.CAB O18 - Protocol: bw+0 - {153C00AA-ED46-434D-9B13-ABB38DEB4EC9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe |
|
|
|
|
|
#4 (permalink) |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
Hi again,
you will need to post that HJT log in the HJT log help section: http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/ though, I had a quick look through it and couldn't find anything bad. Post it in that section anyway. What were the favourates called? Go to My Computer, C:, Documents and Settings, *user name*, Favourates. Are they in this folder? Can you delete them from this folder? |
|
|
|
|
|
#5 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2
|
hi Joefireline
this is what installed on my computer and attached them selves to my favorites ( they are COOL STUFF/folder TRAVEL/folder SHOPPING GIFTS/folder INTERNET/folder COMPUTERS/folder ONLINEGAMING/folder COMPUTERS/web address MOVIE/web address GAMES/web address WEBHOSTING/web address CASINOONLINE/web address ) they are not in my favorites in C drive and i cant delete them |
|
|
|
|
|
#6 (permalink) |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
I see you have google toolbar, did you install this?
Try going to add/remove programs in control panel and remove google toolbar. I see you also have Windows Live Toolbar, remove this too. Also, did you check all users for the favourates as well? My Computer > C: > Documents and Settings > All Users > Favourates. Please click on favourates in IE, and print screen it for me. |
|
|
|
|
|
#8 (permalink) |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
Ok,
on your keyboard, there will be a button called 'Print Screen' or 'PrtSc', press it with Internet Explorer open, and favourates up, though if it is one with 'SysRq' underneath, press Shift and that key. Now open up paint, or another photo editing program, and press 'Ctrl' and 'V', or right click and paste or edit and paste. Save it, and attach it to a message. |
|
|
|
|
|
#9 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2
|
Hi Joefireline
did what you asked i looked in> C: > Documents and Settings > All Users > Favourates. there is nothing there and when i try to right click and delete these folders nothing happens it doesnt give me any options to do any thing and when i go into organise favorites there is nothing there here is a snap shot of my favorites i am trying to upload the snap shot of my favorites but it wont let me ??????? |
|
|
|
|
|
#10 (permalink) | |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
Quote:
Try: Go to www.imageshack.us , click on 'Browse...', find the image, click on it, then click on 'host it!'. Copy the link on 'Hotlink for forums (1)', paste('Ctrl' and 'V') it to this message and send. |
|
|
|
|
|
|
#11 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 55
OS: XP pro service pack 2
|
Hi Joefireline
![]() [img=http://img95.imageshack.us/img95/8339/favorites1ug7.png] there is a snap shot of my favorites and a snap shot of a screen thet i get every time i try to get on the net it wont let me i have to turn my modem off then keep trying till it lets me many thanks mrbloby |
|
|
|
|
|
#12 (permalink) |
|
Enthusiastic TSFer~Joseph
Join Date: Apr 2006
Location: Portishead (Bristol) England
Posts: 5,319
OS: Windows 7 64bit(Desktop) / XP Home SP2(laptop)
|
Judging by what Deckard has posted here: favorites , this is likely the problem. When Deckard has gone through everything, and done everything he can, post back with the results, weather it has cleared or not.
|
|
|
|
![]() |
| Thread Tools | |
|
|