Author Topic: Can't get AVG to work (Read 9235 times)

thefonz · « **on:** October 26, 2008, 12:14:45 PM »

>:(Every time I download AVG and get to the set up it says the file is corrupted. I reformatted my XP home edition with 387 MB 1.20 cache speed.

Before today I did have AVG working I thought but it would go bad and I would have no protection. In fact I thought it was automatic that it would update periodically during the day so I would anywheres from 29MB to 50MB downloading of updates. But I would be doing this all day. I would gladly try another, I did with AVAST but I would get that blue ball with the red slash so then I would not be protected. So, any advise would be appreciated.

soybean · « **Reply #1 on:** October 26, 2008, 01:15:22 PM »

Quote from: thefonz on October 26, 2008, 12:14:45 PM

Before today I did have AVG working I thought but it would go bad and I would have no protection.

What do you mean by "it woud go bad"?

Quote from: thefonz on October 26, 2008, 12:14:45 PM

In fact I thought it was automatic that it would update periodically during the day so I would anywheres from 29MB to 50MB downloading of updates. But I would be doing this all day.

So, you think AVG would normally download 29MB to 50MB of updates daily? Where did you get that notion?

I normally see AVG updating in my system when I first startup in the morning. I normally see no signs of subsequent updates throughout the day; and, a typical daily update is not going to be anywhere near 29MB to 50MB. Of course, a search for updates can be manually initiated any time via the AVG user panel but I normally don't do that.

thefonz · « **Reply #2 on:** October 26, 2008, 01:41:10 PM »

Thats just it. I set it for 8:00 a.m. but it wont start so I have to manually do a scan.

soybean · « **Reply #3 on:** October 26, 2008, 03:03:34 PM »

Quote from: thefonz on October 26, 2008, 01:41:10 PM

... have to manually do a scan.

Oh, now you're talking about scanning, not downloading updates or installing? Can you clarify exactly what your question/problem is?

thefonz · « **Reply #4 on:** October 26, 2008, 04:29:41 PM »

Look, I have used avg 7.5 for a few years and it was totally automatic from auto scanning to updating. With the 8.0 it really I suppose should be the same but at 8:00 am no scan so I go and manually do it. As far as updating after the scan I would update and fine. But doing the day I would get the red shield with the x and I would go and click the avg icon and it showed that everything except email and sometimes email was off. I would click update and woh a huge update and then I would have to rebot. A few times a day I would do this.

thefonz

Broni · « **Reply #5 on:** October 26, 2008, 05:19:43 PM »

1. There is no reason to scan your computer every day. Waste of time, and resources.
2. AVG 8.0 has been having a lot of problems from get go.
3. Download HijackThis:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Click on Download HijackThis Installer
Post HijackTHis log.

thefonz · « **Reply #6 on:** October 27, 2008, 08:29:50 AM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:27:04 AM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1619 bytes

Broni · « **Reply #7 on:** October 27, 2008, 05:31:17 PM »

This is either partial log only, or it's partial, because your computer is infected.
Rename hijackthis.exe to computerhope.exe, run it again, and post new log.

thefonz · « **Reply #8 on:** October 27, 2008, 06:44:50 PM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:43:10 PM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1702 bytes

Remember I just recently formatted so it is not very big.

Broni · « **Reply #9 on:** October 27, 2008, 06:49:44 PM »

You didn't rename it. It's still listed as HijackThis.exe

thefonz · « **Reply #10 on:** October 27, 2008, 08:16:50 PM »

I am so sorry, but I really do not know how to save the new scan to "computer hope.exe" I have done HiJack scans many times and was never asked to rename the scan.

Do I click: scan and save to log
Do I click: just scan (which I did and it did now completely save to "computer hope.exe"

It;s 9:16 pm my time I will wait for some take on this perhaps.

Broni · « **Reply #11 on:** October 27, 2008, 08:20:22 PM »

Open Windows Explorer.
Navigate to: C:\Program Files\Trend Micro\HijackThis folder.
Right click on HijackThis.exe, click "Rename".
Rename to computerhope.exe.
Double click computerhope.exe to run HJT.

thefonz · « **Reply #12 on:** October 27, 2008, 08:25:09 PM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:23:33 PM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\computerhope.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

HOW COME IT STILL LOOKS THE SAME>WHERE IS THE NEW NAME I TYPED?

DID I DO IT RIGHT?

--
End of file - 1664 bytes

Broni · « **Reply #13 on:** October 27, 2008, 08:30:57 PM »

I don't know, if it has anything to do with it, but you renamed HJT file to computerhope.exe.exe. One "exe" too many.
It should read computerhope.exe
Try again.

thefonz · « **Reply #14 on:** October 27, 2008, 08:33:54 PM »

This is really weird and and crazy this is what I did this is a screen shot.

But I will do it again!!!!!!!!!!

[Saving space - attachment deleted by admin]

thefonz · « **Reply #15 on:** October 27, 2008, 08:36:50 PM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:36:07 PM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Trend Micro\HijackThis\Computerhope.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1708 bytes

Broni · « **Reply #16 on:** October 27, 2008, 08:44:41 PM »

Nope.
You have to remove on "exe" from computerhope.exe.exe

thefonz · « **Reply #17 on:** October 27, 2008, 08:47:09 PM »

Doing it again because I saw the .exe 2 times. More careful this time

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:43:51 PM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\Computerhope.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1664 bytes

thefonz · « **Reply #18 on:** October 27, 2008, 08:56:10 PM »

I am not sure but did it work out right this time?

Broni · « **Reply #19 on:** October 27, 2008, 09:03:18 PM »

OK.
One more time.
In Windows Explorer, right click on Computerhope.exe.exe, click "Rename".
Type computerhope
Do NOT type computerhope.exe, "exe' is already there.
Hit Enter.
Make sure, the file reads computerhope.exe, NOT computerhope.exe.exe
Double click on computerhope.exe

thefonz · « **Reply #20 on:** October 27, 2008, 09:12:44 PM »

ok this time I R clicked and renamed computerhope and left the .exe

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:09:42 PM, on 10/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\computerhope.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1665 bytes

Broni · « **Reply #21 on:** October 27, 2008, 09:19:22 PM »

No. Can't you see, it still reads computerhope.exe.exe?
It has to be computerhope.exe

thefonz · « **Reply #22 on:** October 27, 2008, 09:24:17 PM »

I can't see it!!!!!!!!!!! I am a 64 year old man and I am crying!!!!!!

thefonz · « **Reply #23 on:** October 27, 2008, 09:28:21 PM »

this is what I typed I right clicked renamed computer hope and left the .exe.

I believe that some how I am supposed to find the other .exe .exe and change that?

10:30 going to bed

[Saving space - attachment deleted by admin]

Broni · « **Reply #24 on:** October 27, 2008, 09:30:57 PM »

OK, OK. Take it easy, please.

Download mine computerhope.exe from here: http://www.uploadbigfiles.net/download.php?file=567Computerhope.exe
Paste it into C:\Program Files\Trend Micro\HijackThis folder.
Double click on computerhope.exe (mine).

thefonz · « **Reply #25 on:** October 28, 2008, 07:41:41 AM »

Have a question for you: When I downloaded Hijack to my computer it is set to put everything I download in a folder titled downloads. Could this be a problem that I was having in renaming the file?

After I posted this I went to program files and look for Trend... and it had its on file folder but it was renamed to computerhope.exe

thefonz · « **Reply #26 on:** October 28, 2008, 07:55:49 AM »

This is what I have in the Hijack folder two icons for Hijack this. Is this correct?

[Saving space - attachment deleted by admin]

thefonz · « **Reply #27 on:** October 28, 2008, 08:11:14 AM »

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:09:14 AM, on 10/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Harry Fitzner\My Documents\ScreenBaby.exe
C:\Program Files\Trend Micro\HijackThis\computerhope.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 1733 bytes

Why do I get the feeling that this still is not right

thefonz · « **Reply #28 on:** October 28, 2008, 02:21:09 PM »

I had to get my Lexmark software so I went to their main site and they turned me over to a associate from Manila, Phillipines. I allowed him to take over my computer (you should have this service also) and he found the software for the Lex. It turned out to be corrupted also and said he was switching over from "Firefox" to "Windows Internet Exployer" and he used the same file which was dowloaded on my desk top and this time it worked. I tell you all this because I thought I would try the AVG 8.0 with Windows Internet Exployer and it also worked so now I am protected for the time being.

Computer is still some what slow. I know you said it might have a virus etc. So what ever you you want to do from here let me know.

SO THE AVG ISSUE IS SOLVED!!!!!!!!!!!!!!!! I am happy!

Broni · « **Reply #29 on:** October 28, 2008, 05:36:59 PM »

I'm glad, you solved something

Double click on a file named "Computerhope", not "Computerhope.exe", and post the log.

thefonz · « **Reply #30 on:** October 28, 2008, 05:49:55 PM »

Now I have 2 files one is just computerhope and the other is computerhope.exe and I double clicked computerhope

I feel that if I new how to change that double .exe that would be good.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:45:32 PM, on 10/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Trend Micro\HijackThis\Computerhope.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe

--
End of file - 3183 bytes

Broni · « **Reply #31 on:** October 28, 2008, 06:05:13 PM »

You did it!
The log is clean. You can delete "Computerhope.exe.exe" file.
Any other problems?

thefonz · « **Reply #32 on:** October 28, 2008, 07:09:02 PM »

I have a few AVG problems but I will address their forum and give them a hard time!! Have to figure out why the little icon next to the time is gone. I bet if I rebot it will come back. When in doubt just rebot. (need a spelling check here)

Thanks for putting up with me with all my stress and stupidity.

Broni · « **Reply #33 on:** October 28, 2008, 07:33:13 PM »

Hey, no problem. The most important thing is....we did it!

Computer Hope Forum

News:

Author Topic: Can't get AVG to work (Read 9235 times)

thefonz

soybean

thefonz

soybean

thefonz

Broni

thefonz

Broni

thefonz

Broni

thefonz

Broni

thefonz

Broni

thefonz

thefonz

Broni

thefonz

thefonz

Broni

thefonz

Broni

thefonz

thefonz

Broni

thefonz

thefonz

thefonz

thefonz

Broni

thefonz

Broni

thefonz

Broni