Hi Im trying to learn as much as I can.

[tony440]

HI again, my problem is simple and I want to learn from it. But trying to get info is more difficult cause to enter anywhere I have to be register. I do want to be register but it takes me more time. I will be patient and register so I can learn more.
Here goes : Ive downloaded a movie and it was major infected. I go crazy and start removing stuff from my computer. Little by little I LOST ALL MY DRIVES, including drives from my mainboard. I have a big mess. I know cause Ive scan my PC. And they all say the same you have a lots of trojans,virus,malware, you name anything and Ill have it. also I have driver detective and tells me all the problems. I have Uniblue registrybooster and tells me what a bunch off errors dude!
QUESTION? CAN I JUST LEARN STEP BY STEP HOW TO REMOVE AND FIX ALL MY ERRORS AND GET BACK MY LOST INFO MANUALLY WITHOUT ALL THIS PROGRAMS?
I willing to be patient and learn everything I need to do it. so I can fight and help others with any kind of problem with their computers thanks to a person who they will never meet. If I even had the idea of how to get back to the person that is attacking me. Ill chop off his fingers so he or she has to use the computer with his *censored*.

[Broni]

Print these instructions out.

1. Download SUPERAntiSpyware Free for Home Users:
http://www.superantispyware.com/

    * Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    * An icon will be created on your desktop. Double-click that icon to launch the program.
    * If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
    * Close SUPERAntiSpyware.

PHYSICALLY DISCONNECT  FROM THE INTERNET

Restart computer in Safe Mode.
To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen

    * Open SUPERAntiSpyware.
    * Under "Configuration and Preferences", click the Preferences button.
    * Click the Scanning Control tab.
    * Under Scanner Options make sure the following are checked (leave all others unchecked):
          o Close browsers before scanning.
          o Scan for tracking cookies.
          o Terminate memory threats before quarantining.
    * Click the "Close" button to leave the control center screen.
    * Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    * On the left, make sure you check C:\Fixed Drive.
    * On the right, under "Complete Scan", choose Perform Complete Scan.
    * Click "Next" to start the scan. Please be patient while it scans your computer.
    * After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    * Make sure everything has a checkmark next to it and click "Next".
    * A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    * If asked if you want to reboot, click "Yes".
    * To retrieve the removal information after reboot, launch SUPERAntispyware again.
          o Click Preferences, then click the Statistics/Logs tab.
          o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
          o If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
          o Please copy and paste the Scan Log results in your next reply.
    * Click Close to exit the program.
Post SUPERAntiSpyware log.

RECONNECT TO THE INTERNET

RESTART COMPUTER!

2. Download Malwarebytes' Anti-Malware: http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html to your desktop.

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform full scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

RESTART COMPUTER!

3. Download HijackThis:
http://www.snapfiles.com/get/hijackthis.html
Post HijackThis log.

[tony440]

here are the 3 logs in this order 1st from superantispyware 2nd malware and 3rd highjack this:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/29/2008 at 07:04 PM

Application Version : 4.15.1000

Core Rules Database Version : 3469
Trace Rules Database Version: 1460

Scan type       : Complete Scan
Total Scan Time : 00:39:28

Memory items scanned      : 184
Memory threats detected   : 0
Registry items scanned    : 4429
Registry threats detected : 0
File items scanned        : 21705
File threats detected     : 14

Rootkit.RunTime3/WinCtrl32
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP106\A0104404.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP90\A0099332.SYS

Trojan.Unknown Origin
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP106\A0104405.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP87\A0098254.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP87\A0099258.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP87\A0099272.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP90\A0099314.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP90\A0099345.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP90\A0099377.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP90\A0099390.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP92\A0099415.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP92\A0100431.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP92\A0100444.SYS
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP93\A0100474.SYS

2nd
Malwarebytes' Anti-Malware 1.18
Database version: 885

8:02:16 PM 6/29/2008
mbam-log-6-29-2008 (20-02-14).txt

Scan type: Full Scan (C:\|E:\|)
Objects scanned: 78255
Time elapsed: 44 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP106\A0104414.sys (Backdoor.Rustock) -> No action taken.

3rd
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:38:26, on 6/29/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\PC Tools AntiVirus\PCTAV.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {402b6f8f-75e3-4e28-ba63-126f48f66480} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7e853d72-626a-48ec-a868-ba8d5e23e045} - (no file)
O2 - BHO: (no name) - {9030d464-4c02-4abf-8ecc-5164760863c6} - (no file)
O2 - BHO: (no name) - {f9112a18-3d55-4e21-8e5d-f589bd167154} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [liveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [MSIWU_1] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKLM\..\RunOnce: [MSIWU_0] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O9 - Extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O15 - Trusted Zone: http://asia.msi.com.tw
O15 - Trusted Zone: http://global.msi.com.tw
O15 - Trusted Zone: http://www.msi.com.tw
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191246115781
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191246203109
O16 - DPF: {8167c273-df59-4416-b647-c8bb2c7ee83e} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: coruscantsimpleactivitylogger - C:\WINDOWS\SYSTEM32\SimpleActivityLogger.dll
O20 - Winlogon Notify: winrkp32 - winrkp32.dll (file missing)
O23 - Service: Ares Chatroom server (areschatserver) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cryptographic Services CryptSvcRasMan (CryptSvcRasMan) - Unknown owner - C:\WINDOWS\system32\acctresp.exe
O23 - Service: Intel(R) License Manager for FLEXlm (intel(r) license manager for flexlm) - Macrovision Corporation - C:\Program Files\Common Files\Intel\FLEXlm\lmgrd.intel.exe
O23 - Service: Distributed Transaction Coordinator MSDTCLmHosts (msdtclmhosts) - Unknown owner - C:\WINDOWS\system32\advapi32m.exe (file missing)
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Telnet TlntSvrTermService (tlntsvrtermservice) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)f.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Management Instrumentation winmgmtAppMgmt (winmgmtappmgmt) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)y.exe (file missing)

--
End of file - 8628 bytes

[Broni]

Your Malwarebytes log says "No action taken."
Maybe, you posted its log from before fixing entries.
Please, post correct log, or re-run Malwarebytes.
If you re-run, I'll need fresh HJT log.

[tony440]

uh Im really stuck I follow your instr. here is the log I get

Malwarebytes' Anti-Malware 1.18
Database version: 885

8:02:21 PM 6/29/2008
mbam-log-6-29-2008 (20-02-21).txt

Scan type: Full Scan (C:\|E:\|)
Objects scanned: 78255
Time elapsed: 44 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{5114BC6D-2B34-4E28-91B8-D6A61C5DAFF5}\RP106\A0104414.sys (Backdoor.Rustock) -> Quarantined and deleted successfully.

[Broni]

Fresh HJT log, please.

[tony440]

is hjt stands for hijackthis? if it does. Ive made a scan and save the log here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:48:23, on 7/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\Userinit.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\PC Tools AntiVirus\PCTAV.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {402b6f8f-75e3-4e28-ba63-126f48f66480} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7e853d72-626a-48ec-a868-ba8d5e23e045} - (no file)
O2 - BHO: (no name) - {9030d464-4c02-4abf-8ecc-5164760863c6} - (no file)
O2 - BHO: (no name) - {f9112a18-3d55-4e21-8e5d-f589bd167154} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [liveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [MSIWU_1] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKLM\..\RunOnce: [MSIWU_0] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O9 - Extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O15 - Trusted Zone: http://asia.msi.com.tw
O15 - Trusted Zone: http://global.msi.com.tw
O15 - Trusted Zone: http://www.msi.com.tw
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191246115781
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191246203109
O16 - DPF: {8167c273-df59-4416-b647-c8bb2c7ee83e} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: coruscantsimpleactivitylogger - C:\WINDOWS\SYSTEM32\SimpleActivityLogger.dll
O20 - Winlogon Notify: winrkp32 - winrkp32.dll (file missing)
O23 - Service: Ares Chatroom server (areschatserver) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cryptographic Services CryptSvcRasMan (CryptSvcRasMan) - Unknown owner - C:\WINDOWS\system32\acctresp.exe
O23 - Service: Intel(R) License Manager for FLEXlm (intel(r) license manager for flexlm) - Macrovision Corporation - C:\Program Files\Common Files\Intel\FLEXlm\lmgrd.intel.exe
O23 - Service: Distributed Transaction Coordinator MSDTCLmHosts (msdtclmhosts) - Unknown owner - C:\WINDOWS\system32\advapi32m.exe (file missing)
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Telnet TlntSvrTermService (tlntsvrtermservice) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)f.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Management Instrumentation winmgmtAppMgmt (winmgmtappmgmt) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)y.exe (file missing)

--
End of file - 8397 bytes
 

[Broni]

You have two antivirus programs running: PC Tools AntiVirus, and Avast. You can't do this. One of them has to be uninstalled.
I suggest, Avast is a keeper.
When done post new HJT log.

[tony440]

hi thanks for the info heres again a log what is this log anyway? can I know or should I really know?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:00:31, on 7/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {402b6f8f-75e3-4e28-ba63-126f48f66480} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7e853d72-626a-48ec-a868-ba8d5e23e045} - (no file)
O2 - BHO: (no name) - {9030d464-4c02-4abf-8ecc-5164760863c6} - (no file)
O2 - BHO: (no name) - {f9112a18-3d55-4e21-8e5d-f589bd167154} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [liveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [MSIWU_1] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKLM\..\RunOnce: [MSIWU_0] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O9 - Extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O15 - Trusted Zone: http://asia.msi.com.tw
O15 - Trusted Zone: http://global.msi.com.tw
O15 - Trusted Zone: http://www.msi.com.tw
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191246115781
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191246203109
O16 - DPF: {8167c273-df59-4416-b647-c8bb2c7ee83e} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: coruscantsimpleactivitylogger - C:\WINDOWS\SYSTEM32\SimpleActivityLogger.dll
O20 - Winlogon Notify: winrkp32 - winrkp32.dll (file missing)
O23 - Service: Ares Chatroom server (areschatserver) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cryptographic Services CryptSvcRasMan (CryptSvcRasMan) - Unknown owner - C:\WINDOWS\system32\acctresp.exe
O23 - Service: Intel(R) License Manager for FLEXlm (intel(r) license manager for flexlm) - Macrovision Corporation - C:\Program Files\Common Files\Intel\FLEXlm\lmgrd.intel.exe
O23 - Service: Distributed Transaction Coordinator MSDTCLmHosts (msdtclmhosts) - Unknown owner - C:\WINDOWS\system32\advapi32m.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Telnet TlntSvrTermService (tlntsvrtermservice) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)f.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Management Instrumentation winmgmtAppMgmt (winmgmtappmgmt) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)y.exe

--
End of file - 8074 bytes

[Broni]

HJT log allows me to see what is running on your computer, and determine, if your computer is in any danger.
This is very powerful too. DO NOT play with it, unless you know what you're doing.
I'll check the log, now.

[Broni]

*** Disable TeaTimer, as it'll interfere with the cleaning process:
Right click Spybot's TeaTimer System Tray Icon.
Click Exit Spybot-S&D Resident.
TeaTimer closes.

*** Disable Windows Defender, as it'll interfere with cleaning process:
   * Open Windows Defender
    * Click Tools
    * Click General Settings
    * Scroll down to Real Time Protection Options
    * Uncheck Turn on Real Time Protection
    * After you uncheck this, click on the Save button
    * Close Windows Defender

1. Print this post out, since you won't have an access to it, at some point.

2. Close all windows, except for HijackThis.

3. Put a checkmark next to the following HijackThis entries (some entries will be checkmarked to disable unnecessary startups; in those cases (marked with *), no actual program will be removed):

- R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
- O2 - BHO: (no name) - {402b6f8f-75e3-4e28-ba63-126f48f66480} - (no file)
- O2 - BHO: (no name) - {7e853d72-626a-48ec-a868-ba8d5e23e045} - (no file)
- O2 - BHO: (no name) - {9030d464-4c02-4abf-8ecc-5164760863c6} - (no file)
- O2 - BHO: (no name) - {f9112a18-3d55-4e21-8e5d-f589bd167154} - (no file)
- *O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
- *O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
- *O4 - HKLM\..\Run: [liveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
- *O4 - HKLM\..\RunOnce: [MSIWU_1] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
- *O4 - HKLM\..\RunOnce: [MSIWU_0] "C:\PROGRA~1\MSI\LIVEUP~1\MSIWUPro.exe" -DEL:[C:\PROGRAM FILES\SETUP FILES\MS-6728 V3.A0\CACHE\MS-6728V3.A0.EXE]
- *O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
- *O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
- *O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
- *O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
- *O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
- *O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
- if you're not familiar with any of O15 - Trusted Zone entries, checkmark unknown entries
- *O20 - Winlogon Notify: !saswinlogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
- O20 - Winlogon Notify: winrkp32 - winrkp32.dll (file missing)
- O23 - Service: Cryptographic Services CryptSvcRasMan (CryptSvcRasMan) - Unknown owner - C:\WINDOWS\system32\acctresp.exe
- O23 - Service: Distributed Transaction Coordinator MSDTCLmHosts (msdtclmhosts) - Unknown owner - C:\WINDOWS\system32\advapi32m.exe (file missing)
- O23 - Service: Telnet TlntSvrTermService (tlntsvrtermservice) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)f.exe
- O23 - Service: Windows Management Instrumentation winmgmtAppMgmt (winmgmtappmgmt) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)y.exe

4. Click on Fix checked button.

5. Restart computer in Safe Mode (keep tapping F8 key, when your computer starts, until menu appears)

6. Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders.

7. Delete following files/folders (if present):

- actxprxy(4)y.exe, actxprxy(4)f.exe, acctresp.exe files from C:\WINDOWS\system32

8. Restart in Normal Mode.

9. Post new HijackThis log.

[tony440]

Ive noticed that in this new log still the 02-20-23 that I check and fix still came back. DO I have to disconnect the internet phoneline PC and check them and fix them again?I will if I have to. Also Why are so many running processes and what are they exactly?Thanks for so much info by the way!

here goes the log :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:30:38, on 7/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {402b6f8f-75e3-4e28-ba63-126f48f66480} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7e853d72-626a-48ec-a868-ba8d5e23e045} - (no file)
O2 - BHO: (no name) - {9030d464-4c02-4abf-8ecc-5164760863c6} - (no file)
O2 - BHO: (no name) - {f9112a18-3d55-4e21-8e5d-f589bd167154} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [NBJ] "C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191246115781
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191246203109
O16 - DPF: {8167c273-df59-4416-b647-c8bb2c7ee83e} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !saswinlogon - C:\WINDOWS\
O20 - Winlogon Notify: coruscantsimpleactivitylogger - C:\WINDOWS\SYSTEM32\SimpleActivityLogger.dll
O20 - Winlogon Notify: winrkp32 - C:\WINDOWS\
O23 - Service: Ares Chatroom server (areschatserver) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cryptographic Services CryptSvcRasMan (CryptSvcRasMan) - Unknown owner - C:\WINDOWS\system32\acctresp.exe
O23 - Service: Intel(R) License Manager for FLEXlm (intel(r) license manager for flexlm) - Macrovision Corporation - C:\Program Files\Common Files\Intel\FLEXlm\lmgrd.intel.exe
O23 - Service: Distributed Transaction Coordinator MSDTCLmHosts (msdtclmhosts) - Unknown owner - C:\WINDOWS\system32\advapi32m.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Telnet TlntSvrTermService (tlntsvrtermservice) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)f.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Management Instrumentation winmgmtAppMgmt (winmgmtappmgmt) - Unknown owner - C:\WINDOWS\system32\actxprxy(4)y.exe

--
End of file - 6371 bytes

[Broni]

1. Did you disable TeaTimer, and Windows Defender, while performing cleaning?
2. What happened with deleting actxprxy(4)y.exe, actxprxy(4)f.exe, acctresp.exe files? You were not able to delete them?
3. Go Start>Run, type in:
cmd
Click OK.

At Command Prompt, type in:
sc stop CryptSvcRasMan
Hit Enter.
Type in:
sc delete CryptSvcRasMan
Hit Enter.

Repeat same "sc stop", and "sc delete" set of command substituting CryptSvcRasMan with:
msdtclmhosts
tlntsvrtermservice
winmgmtappmgmt

Report on progress, and post new HJT log.

[tony440]

I look again for the actxprxy(4)y.exe , actxprxy(4)f.exe and acctresp.exe there were no results I did manually and also use the search browser and there are no files with those lettrs or names??? I guess they were deleted successfully.
Here is the new log from HJT:

 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:59:48, on 7/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [NBJ] "C:\PROGRA~1\Ahead\NEROBA~1\NBJ.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [java_sun] Java (Sun)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1191246115781
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1191246203109
O16 - DPF: {8167c273-df59-4416-b647-c8bb2c7ee83e} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: coruscantsimpleactivitylogger - C:\WINDOWS\SYSTEM32\SimpleActivityLogger.dll
O23 - Service: Ares Chatroom server (areschatserver) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) License Manager for FLEXlm (intel(r) license manager for flexlm) - Macrovision Corporation - C:\Program Files\Common Files\Intel\FLEXlm\lmgrd.intel.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 5454 bytes
 

[Broni]

Good job

Your computer is clean

1. Download, and install CCleaner: http://www.ccleaner.com/download/builds. Get "Slim" version.
Read CCleaner instruction here: http://www.jahewi.nl/ccleaner/ccleaner.html.
Run CCleaner.

2. Turn off System Restore:

- Windows XP:
   1. Click Start.
   2. Right-click the My Computer icon, and then click Properties.
   3. Click the System Restore tab.
   4. Check "Turn off System Restore".
   5. Click Apply.   
   6.  When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
   7. Click OK.
- Windows Vista:
   1. Click Start.
   2. Right-click the Computer icon, and then click Properties.
   3. Click on System Protection under the Tasks column on the left side
   4. Click on Continue on the "User Account Control" window that pops up
   5. Under the System Protection tab, find Available Disks
   6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C:")
   7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
   8. Click OK

3. Restart computer.

4. Turn System Restore on.

5. (optional) Download, and install free version of ThreatFire: http://www.threatfire.com/. It'll give you an extra protection against malwares. It won't interfere with your antivirus program

6. Read "So how did I get infected in the first place?": http://www.castlecops.com/postlite7736-.html

7. Let me know, how your computer is doing.

[tony440]

PC is great now! still Ive to learn to get back my mainboard drives or update them if thats the problem. Is there a similar topic at the FAQ(frequent ask questions).please let me know so I can keep learning! I know this cause  Ive used a program called driver detective. If it can be done without the help of this program I will learn how. Thank you again for so much time and help happy summer.  TONY440

[Broni]

I'm glad, your computer is back to normal

As for drivers....
Normally, if everything works OK, leave drivers alone.
If you want to back up your drivers (just in case), I recommend free DriverMax: http://www.innovative-sol.com/drivermax/
It'll detect all drivers, back them up, and restore, if necessary.

[tony440]

what I meant was that I still dont have nothing on my device manager. so I need to learn what the problm is? anyway youve been so helpful I cant thank you enough! the site of drivemax is helpful but they dont have available my windows xp they only have the windows vista drive for download. If you know anywhere I can visit to learn about my problm Ill be happy to take a good look. Happy Summer tony440!

[Broni]

DriverMax works with XP. As I said before, you don't need to download any drivers, unless there is something wrong with them.
If you ever need any driver, you can always ask here to help you locate it.
Now...
You have to explain this:

I still dont have nothing on my device manager

[tony440]

sorry Ill try to be more specific. When I use the drivermax I went directly to check for updates and the program says that almost every driver has a newer version of my drives but they are not available for the moment for windows xp.At least I try to download the newest version but they sent me to a site that says the drives are not available for the moment but will soon.
NOW what I mean by nothing in my device manager. I open the device manager and I can only see the following things:

file action view help
here are some drawings of 2 things one is to show the device manager picture at the left rigth here
and the other draw is the one for help. Even by clicking at them nothing appears.Now down below or right were there is supposed to be what is in my computer. I cant see anything cause is blank the hole window is blank.

 Ive been reading some other porblms at the FAQ and found one similar called device manager empty and there are some instructions that I tried and got info. Here is what I tried.

1st. Check the plug and play. so I do this right? but when I go to plug and play and click pc tells me that other services are needed or something like it.

2nd.Run regedt32 and go all the way to something called "enum". But I cant go futher cause I dont have more instructions to follow so I just didnt do anything.

well I tried to be specific. if I can understand something else so that I can be more specific I will post it as soon as possible. 

[Broni]

When I use the drivermax I went directly to check for updates

I told you already twice, there is no reason to update drivers, when there is noting wrong with them.

As for Device Manager...
Download , and install Gadwin PrintScreen: http://www.gadwin.com/printscreen/
Gadwin's manual: http://computerclub.ca/gadwin.pdf
Then, post a screenshot of your Device Manager.

[tony440]

Im sorry sorry but after I took the photo I just dont have a clue on how to post it in here. would yo please help? I read the manual but didnt get a clue  and I will leave my drives alone. But here is a question if my drives are ok. How come my computer says I have no audio device?
Tell me how to post the picture in the replys so then I can show the mess Ive been dealing with. All I could understand at the manual was how tos on a command line but they all I see is example: Gadwin PrintScreen accepts these command line arguments on the Windows Run… command line:  /preview='yes|no'
  - Displays Capture Preview Window to see the images you capture before finishing output
 
 
 
  /cptarea='0|1|2|3'
  - Captured area:
        0 - select this option to capture all of a user selected window;
        1 - select this option to capture the client area of a user selected window;
        2 - the full screen is used as source for capturing;
        3 - select this option to capture a rectangular region of the screen you select;
 
 
 
  /cursor='yes|no'
  - Capture the mouse pointer
 
 
 
  /clipboard
  - Copy the captured image into clipboard
 
 
 
  /email
  - Send the captured image through electronic mail
 
 
 
  /print
  - Print the captured image
 
These are some of the commands but I just dont understand how to drag one to post reply. Im really sorry I know my best is not even close to good enough but that is why I want to learn a lot so in a future I could just help someone just like youre doing with me. Maybe in a far,far,away future

[Broni]

After installing, don't change any settings.
Follow instructions from page 6 of manual to take a screenshot.
Screenshot will be saved to a file on your desktop.
Attach the file to your next reply, using "Additional options...".

[tony440]

ok here it is. I know is little but even if it was bigger youll see the same a blank device manager.

[recovering disk space -- attachment deleted by admin]

[tony440]

Ill try it again so you can see it bigger


[recovering disk space -- attachment deleted by admin]

[Broni]

See? You've learned. Bravo!
Now, let me think about your problem...

[tony440]

thanks man! just not in a hurry so take your time.

[Broni]

Try this:
1. Click Start, Run, type services.msc and click OK.
2. Double-click Plug and Play.
If you receive a Configuration Manager message, click OK.
3. In the Startup Type list, click Automatic, and then click OK.
4. Close Services.
5. Reboot computer

[tony440]

I have a question before doing the following instructions. There is an available click that allows the plug and play for the service to be start. Now the question should I click this first? cause I know that in the startup type is already in automatic. And I do receive a configuration massage:The plug and play service or another required service is not available.

[Broni]

There is an available click that allows the plug and play for the service to be start.

Where?

[tony440]

ok here is an image if it is blurry Ill send as clear as possible

[tony440]

sorry hit the wrong button


[recovering disk space -- attachment deleted by admin]

[Broni]

See, how screenshot is helpful?
Yes, click to start the service, then set it to automatic start under properties, and restart computer.

[tony440]

got another configuration manager massage it says: Could not start the plug and play service on Local Computer. Error 2: the system cannot find the file specified   

[tony440]

does this help?


[recovering disk space -- attachment deleted by admin]

[Broni]

OK, that message, set Plug and Play service to start automatically, and restart computer.

[tony440]

ok now I follow what you told me to. But even when I click apply to put the plug and play automatically I got a configuration massage: The plug and play service or another required service is not available. But I did restart the computer.

[Broni]

OK. Bed time, but not for you....LOL
Go Start>Run, type in:
sfc /scannow
Click OK.
Have Windows XP CD handy.

[tony440]

ok good sleep but when you read this u might not belive it but is true. what if I told you that I got windows xp professional but i dont even know how. What Im trying to say is that  I really dont know who install it on my computer. I dont have a CD of Professional. And I just found out like months ago. That it was install on my computer.This is the main reason I want to learn how to do things in a computer. Ive realized people really mess up things for you so you just have to send it back where they supposedly fix computers. That is the last time I let go of my stuff to anyone. this is why I cant thank you enough for your help. I mean the last thing I thought of finding is a kickass site for people to learn how to fix their own problms of computers. So if that is it for my computer Ill just say this to anyone that can read this forum post NEVER LEAVE YOUR COMPUTER AT A COMPANY CALLED COMPUSA!NEVER!!
Broni if there is another way please let me learn from you!Thank you again!      

[Broni]

I'm afraid, you'll have to get that CD. Sooner, or later everyone needs one.

[tony440]

Hi again Broni! I was just looking at this to see I could just have a audio but first I wanna to ask should the sound scheme has to have something? I will get a windows xp CD but that has to wait.


[recovering disk space -- attachment deleted by admin]

[Broni]

Very possible, it's the same reason for empty "Sound scheme" field - some system files corruption.
It should say "Windows default".

[tony440]

should I try to put it on windows default:


[recovering disk space -- attachment deleted by admin]

[Broni]

Sure thing...

[tony440]

uh? even if I do this. Ill still be without an audio device right?

[Broni]

I can't tell.
As I stated before, it looks like some of your system files got corrupt, and we definitely need Windows CD to start with.
You may try to borrow one, but it has to have exact same Windows version with very same Service Pack.

[tony440]

HI! I found info that I will like for you to look at and tell me if I should try this. Ive found a site were lead me to another. The one that is important is called www.kellis-korner-xp.com/xp_tweaks.htm. Now here is the thing. You know Im trying to get the audio device back so at this web site at the #371 it says restore sound and I got all of this info that I just get lost and dont know were to start.please take a look:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioSrv]
"DependOnService"=hex(7):50,00,6c,00,75,00,67,00,50,00,6c,00,61,00,79,00,00,00,\
  52,00,70,00,63,00,53,00,73,00,00,00,00,00
"Description"="Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"DisplayName"="Windows Audio"
"ErrorControl"=dword:00000001
"Group"="AudioGroup"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioSrv\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  61,00,75,00,64,00,69,00,6f,00,73,00,72,00,76,00,2e,00,64,00,6c,00,6c,00,00,\
  00
"ServiceDllUnloadOnStop"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioSrv\Enum]
"0"="Root\\LEGACY_AUDIOSRV\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PlugPlay]
"Description"="Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability."
"DisplayName"="Plug and Play"
"ErrorControl"=dword:00000001
"Group"="PlugPlay"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,65,00,72,00,76,00,69,00,63,00,65,00,73,00,2e,00,65,00,78,00,65,00,00,00
"ObjectName"="LocalSystem"
"PlugPlayServiceType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PlugPlay\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,\
  05,0b,00,00,00,00,00,18,00,9d,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  23,02,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,\
  02,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs]
"Description"="Provides the endpoint mapper and other miscellaneous RPC services."
"DisplayName"="Remote Procedure Call (RPC)"
"ErrorControl"=dword:00000001
"Group"="COM Infrastructure"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,20,00,2d,00,6b,00,20,00,72,00,70,00,\
  63,00,73,00,73,00,00,00
"ObjectName"="NT Authority\\NetworkService"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
  00,02,00,00,00,60,ea,00,00
"DependOnService"=hex(7):44,00,63,00,6f,00,6d,00,4c,00,61,00,75,00,6e,00,63,00,\
  68,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  72,00,70,00,63,00,73,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\
  05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\
  02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\
  18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
  00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Enum]
"0"="Root\\LEGACY_RPCSS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"NoNetCrawling"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"Max Cached Icons"="12000"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"DisplayName"="Themes"
"Group"="UIGroup"
"ObjectName"="LocalSystem"
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,74,00,65,\
  00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00
"Description"="Provides user experience theme management."

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  73,00,68,00,73,00,76,00,63,00,73,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceMain"="ThemeServiceMain"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes\Enum]
"0"="Root\\LEGACY_THEMES\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000000

Now even this is a lot info. In the web site I have a option to download TaskArrange v1.1.1 and I will like to know if I just need this instead of all this info to follow or must I do both to get my audio device back. I do understand that I need the CD you ask me to get still I wont give up to find another way to get what I had without it. Please dont be mad is just that untill I can get my hands on that CD I wont stop looking for info to keep learning.

[Broni]

To use that registry fix, copy all the text, including its header: Windows Registry Editor Version 5.00
Paste it into Notepad, and save it as sound_fix.reg file.
Next, double click on sound_fix.reg file.
Agree to registry merge.
Restart computer.

[tony440]

well we achieve a progress. I got my sound effect manager back still no audio device do. But Im happy I could test the speakers and heard finally a sound of triumph. Question: Do I have to unistall and then reinstall something back?   

[Broni]

I got my sound effect manager back still no audio device do

Please, clarify

[tony440]

I got back part of what was missing just this part the sound effect manager but I look to sound,speaker and audio devices and still no audio device.

[recovering disk space -- attachment deleted by admin]

[tony440]

hey broni some person put me this on a reply do you know what hes talking about?

[recovering disk space -- attachment deleted by admin]

[Broni]

some person put me this on a reply

Who? Where?

I got back part of what was missing just this part the sound effect manager but I look to sound,speaker and audio devices and still no audio device

I'm afraid, that without Windows CD, we can work on those problems for another month. I'm sorry, but it's just pointless.

[evilfantasy]

It's not wise to post your IP in a public forum unless  you want to get hacked. You should remove the image or edit out the IP.

[Broni]

How true. I just fixed it.

[tony440]

I know is dangerous! some is saying something about getting a anonymous IP at danasoft.com what is that and should I do it? Im scared!

[Broni]

If your firewall is up, and working, don't worry about it.

[tony440]

Ill just stop looking around the web and get my CD and not even gonna ask for one.Ill soon as I can buy my own. Cause I feel like a fish on a hook!
And broni Ill be back to keep learning from you. Youve been like a teacher Thanks a million times and hope I can come back soon!

[Broni]

You're very welcome, and believe me, you'll feel much better having that CD

[tony440]

Man the person that send me those messages was scary! I really like to have a strong firewall now. First I thought he was warning me about my IP. Then he kept the messages saying I have 30 days to activate the windows. Like I understand Chinese or something. Whatever he meant made me to report him saying he wasn't trust worthy and hes info on how to fix stuff wasn't helpful at all. I mean all he could say was like go to Microsoft support and forums. Like I haven't try that already! He was so scary that hes picture was a cat shooting out the windows with like an AK47 gun. His stupid nick was MPH what the ..... anyway Ill just be patient and trust he wont mess more my computer than it is already. Like I said on my first reply of the topic I want to learn as much as I can to not let people like him have his way with. Really if people have knowledge they shouldn't get the chance to prison. Im mean a guy like him for real would not stand a chance on the streets with that type of attitude . Thats the main reason he messes with people like me. If he wants to be a part of THE ELDER GEEK OF WINDOWS XP is more the ignorant part. I bet hes not even close to be a real person in life. what a waste of time to even know who he is  

[Broni]

How were those messages sent to you?

[evilfantasy]

Are you saying someone on THE ELDER GEEK website sent you those messages?

[tony440]

yes! he has a nick like MPH I dont know what that stands for but it aint miles per hour if you know spanish thats stands for Maricon,Pendejo,Hijoelagran!

[evilfantasy]

Yes you are seeing the IP on The Elder Geek. His signature is set up so anyone viewing his posts are shown that. It shows my IP as well but I am the only one who can see it. Nobody else on those forums can see any IP but their own.

Relax. They are a very knowledgeable and trustworthy group over at those forums and they wouldn't let any member continue posting potentially harmful information. They would get banned in a heartbeat!

On another note it is risky to post in two different forums and follow everyone's advice. Broni has put a lot of time into helping and when you do things behind his back it is very confusing because things are changing and he doesn't know why they have changed.

http://www.theeldergeek.com/forum/index.php?showtopic=31248&st=0&p=202188&#entry202188

Is the Danasoft signature a hacking tool, or can it be used to violate anyone's privacy?

[tony440]

This just unreal for me. I never meant to fix anything. Just to learn from broni should had been enough for me.That is why before I did anything at all I first ask broni. I just lost control and Im sorry if I made a terrible mistake to broni he is to good and I understand that now. Thank you for giving me a wake up call. Is been so long I talk to good people. The last thing that cross my mind was that this is like a stab at the back of someone. I was just trying to get more info. I thought that if I wasn't being specific is because my poor knowledge. All I want is to be good. I feel lost but I wont give up easy my wish to keep on learning.   

[evilfantasy]

Don't worry, Broni is a good guy also.

[tony440]

Calm like a bomb. I really dont know what many things can harm my computer but I do know there are a lot. There are so many ways to get in trouble they make me feel like in the middle of the pacific and without wilson from the movie cast away. It makes me to be thankful for this types of sites. But it is confusing.

[Broni]

they make me feel like in the middle of the pacific and without wilson

Hahahaha

[tony440]

  HA! guess what I got back and just by giving a second look at the services. Here my theory on how I believe I got back the device manager stuff. At the services there is another plug and play but it starts with universal plug and play. It had the option of restart so I risk it and then restart. Then I take a look at the plug and play and look for the dependencies tab at the properties. After that sense the plug and play was on automatic all I had to look for was the services that weren't started. They were a few services .I started most of what the computer let me start and last restart again the computer after that I went to the troubleshooters this was what put me on hold to take a look at the device manager again just to see if there were changes. And of course they were! But sense this part is not a part of what I will like to do alone. I want to wait for broni to help me find the problem of the audio device and at least let him know we can try something new now that I got my device manager back! YYEEEEEAAHHHHHH !

[recovering disk space -- attachment deleted by admin]

[Broni]

Nice job, Tony

Now...say again what the sound problem is...

[tony440]

well the sound problem is Im afraid I need the audio device back but if I have to use the device manager I dont know were to look.

[tony440]

I mean on the device manager I dont exactly know what is my audio devices name. So I can then tell what is actually wrong.

[Broni]

Download, and install Everest: http://www.majorgeeks.com/download4181.html
Open it, click Computer, then Summary.
In upper menu, go Report>Quick Report-Summary
Save it in text file, and paste it in your next post.
Don't include anything under line Debug - PCI

[tony440]

Is it suppose to say everest home edition? or it just doesn't matter?

[tony440]

--------[ EVEREST Home Edition (c) 2003-2005 Lavalys, Inc. ]------------------------------------------------------------

    Version                                           EVEREST v2.20.405
    Homepage                                          http://www.lavalys.com/
    Report Type                                       Quick Report
    Computer                                          WORKSTATION
    Generator                                         User
    Operating System                                  Microsoft Windows XP Professional 5.1.2600 (WinXP Retail)
    Date                                              2008-07-12
    Time                                              22:58


--------[ Summary ]-----------------------------------------------------------------------------------------------------

    Computer:
      Operating System                                  Microsoft Windows XP Professional
      OS Service Pack                                   Service Pack 2
      DirectX                                           4.09.00.0904 (DirectX 9.0c)
      Computer Name                                     WORKSTATION
      User Name                                         User

    Motherboard:
      CPU Type                                          Intel Pentium 4, 3000 MHz (15 x 200)
      Motherboard Name                                  MSI 865PE Neo2-PS (MS-6728 v2.0)  (5 PCI, 1 AGP, 4 DDR DIMM, Audio)
      Motherboard Chipset                               Intel Springdale i865PE
      System Memory                                     512 MB  (PC2700 DDR SDRAM)
      BIOS Type                                         AMI (09/29/04)
      Communication Port                                Communications Port (COM1)
      Communication Port                                Communications Port (COM3)
      Communication Port                                ECP Printer Port (LPT1)

    Display:
      Video Adapter                                     nVIDIA GeForce4 MX 4000 (MSI MX4000)
      3D Accelerator                                    nVIDIA GeForce4 MX 4000

    Multimedia:
      Audio Adapter                                     Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]

    Storage:
      IDE Controller                                    Intel(R) 82801EB Ultra ATA Storage Controllers - 24DB
      Floppy Drive                                      Floppy disk drive
      Disk Drive                                        SAMSUNG SP1604N  (160 GB, 7200 RPM, Ultra-ATA/133)
      Disk Drive                                        ST3160815A  (149 GB, IDE)
      Optical Drive                                     PIONEER DVD-RW  DVR-110D  (DVD+R9:8x, DVD-R9:8x, DVD+RW:16x/8x, DVD-RW:16x/6x, DVD-RAM:5x, DVD-ROM:16x, CD:40x/32x/40x DVD+RW/DVD-RW/DVD-RAM)
      SMART Hard Disks Status                           OK

    Partitions:
      C: (NTFS)                                         152617 MB (144145 MB free)
      E: (NTFS)                                         152617 MB (150229 MB free)
      Total Size                                        298.1 GB (287.5 GB free)

    Input:
      Keyboard                                          Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
      Mouse                                             PS/2 Compatible Mouse

    Network:
      Network Adapter                                   Realtek RTL8169/8110 Family Gigabit Ethernet NIC  (70.45.131.42)
      Modem                                             PCI SoftV92 Speakerphone Modem
      Modem                                             Smart Link 56K Voice Modem

    Peripherals:
      Printer                                           Microsoft XPS Document Writer
      USB1 Controller                                   Intel 82801EB ICH5 - USB Controller [A-2/A-3]
      USB1 Controller                                   Intel 82801EB ICH5 - USB Controller [A-2/A-3]
      USB1 Controller                                   Intel 82801EB ICH5 - USB Controller [A-2/A-3]
      USB1 Controller                                   Intel 82801EB ICH5 - USB Controller [A-2/A-3]
      USB2 Controller                                   Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]

It work just fine!

[Broni]

Download new driver from here: http://www.realtek.com.tw/Downloads/downloadsView.aspx?Langid=1&PNid=14&PFid=23&Level=4&Conn=3&DownTypeID=3&GetDown=false
Now, go to Device Manager, click on a "+" sign next to Sound, video, and Game Controllers, right click on AC'97 Audio Controller, click Properties, then Driver tab.
Click Uninstall button.
When all done, double click on freshly downloaded driver, and it'll start installation.
You may need to reboot afterwords.

[tony440]

I did it ! uh? what else most I do?

[Broni]

Did it work? Do you have your sound back?

[tony440]

Uh no. Actually Im thinking do I need to check something at the Amibios? Cause if not Ill just run out to device manager again to look at the sound,audio&game controllers.

[Broni]

Did you actually reinstall that driver?

[tony440]

yeah I follow your instructions but wait! wait for me to comeback. Im gonna restart the computer cause I change at the audio tab and the voice tab to realtek Im sending 3 images for you to look at. Now it says that I have an audio device look. If you can notice I had to change it to realtek cause it was like in something else

[recovering disk space -- attachment deleted by admin]

[tony440]

  WE DID IT WE ACTUALLY GOT BACK MY AUDIO DEVICE!!!!!!!!

[Broni]

Let me know.

[tony440]

I just did told ya we did it broni we did it  I can actually hear sound on my computer now. All we had to do was install that driver and set it as the images show.

[Broni]

Very good, sir!!

[tony440]

Oh Broni so much thinking my head hurts I just go to sleep and come back with more situations we can fix.    but let me say anyone who has trouble they should get a real big bucket of patience and should know that there is good help out there and also look for a guy named BRONI MAN YOU RULE! Thank you!!!!!!!!!!!

[Broni]

and come back with more situations we can fix.

Oh, nooooooooooooooooooooo!!!

Just kidding

You're welcome

[tony440]

HI!! everytihng is great I just want your feedback do you know Limewire? Do you think is safe? I ask this cause I would really love to see some movies but tried online and is impossible if you dont pay. I find that hard to believe when web is so useful. I do see some shows but I would like to try movies. Can it be done?

[tony440]

Nevermind Broni ! I did some research it cant be done. But it was good to be able to write back on the topic. 

[Broni]

It's against the board rules to advice you on downloading copyrighted material.

[tony440]

Heeyy!! guess you probably know  there is another question. I use facebook and got a post that says that any person can get hack on facebook if any person that you have on your profile has that hacker on their list of friends so you I mean anyone can get hack by the hacker. Is in spanish so I wont post it unless you know spanish or if you anyway!!! here what the hacker does I mean thats what the post I received says: Do not accept this person Luisa Ledezma or something it doest not matter what she does is that she formats your PC and then stoles your info and get your password from your mail. For me totally sounds way to risky for a hacker to be that dumb so I just want feedback. If you didnt understand or will like more info I can say I post a reply to get exactly what happens. oohh!! Thanks for replying and just letting you know I gave up Ill just watch movies at the TV is good that the board does not allow to talk about it. I learn that watching those things on the web is just really bad and can get anyone in a lot of trouble.

[Broni]

Unfortunately, I don't know much about Facebook, but I'm sure, others do, so you may start new topic on this.

[tony440]

Great!!! I will!!! but first Ill try to get more info see ya soon

[Broni]

No problem

[merlin]

Find out; more,about activex,