Vape

Please download the latest version of Hijackthis (1.99.1) and post another log.

I'm not entirely sure if backing up game cd's like this is legal, if you only use it for backup purposes and you keep the original cd yourself, but in any case it's extremely difficult and requires the download of dodgy programs and executable files. It's far easier to just take good care of the original cd and make sure it doesn't get scratched ;)

Nope you can still quote. You can do this either by clicking the "quote" button next to someone's post, or by typing in the code yourself. For a quote without an author, the code is [quote]To be or not to be, that is the question.[/quote] And that will appear like this: But this looks kinda ugly, and it's much neater to mention who made the quote, eg: [quote name="Neil Armstrong"]One small step for (a) man, one giant leap for mankind[/quote] And that will produce this: :)

Please download Ad-Aware SE and Spybot S&D (google for the links,) update them and run scans. Then repost your log.

Oooookay... not pretty. Go to My computer -> control panel -> add/remove programs. See if there's anything called "Windows TaskAd," "SearchUpgrader" or "SurfSideKick" if so, uninstall them. Restart your pc. Next, this is important. Move the Hijackthis[Caution: ExecutableFile] file to a new location so it has it's own folder. Eg: C:\Program Files\Hijackthis\Hijackthis[Caution: ExecutableFile]. If you were able to remove Windows TaskAd, SearchUpgrader and SurfSideKick through ad/remove programs, then skip a step here. If not, hit ctrl+alt+del and end task on these processes: WinTaskAd[Caution: ExecutableFile] and WinSched[Caution: ExecutableFile]. If they're not there, go into Hijackthis and then "config." Click "misc tools" and then "open process manager" If WinTaskAd[Caution: ExecutableFile] or WinSched[Caution: ExecutableFile] are in them, kill them. Then go to hijackthis, scan and fix the following entries: R3 - URLSearchHook: (no name) - _{CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - (no file) R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\Program Files\SurfSideKick 2\SskBho.dll O2 - BHO: (no name) - {00320615-B6C2-40A6-8F99-F1C52D674FAD} - (no file) O4 - HKLM\..\Run: [searchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader[Caution: ExecutableFile] O4 - HKLM\..\Run: [cjoeoespdp] C:\WINDOWS\system32\zqjfke[Caution: ExecutableFile] O4 - HKLM\..\Run: [wdskctl] C:\WINDOWS\wdskctl[Caution: ExecutableFile] O4 - HKLM\..\Run: [conscorr] C:\WINDOWS\conscorr[Caution: ExecutableFile] O4 - HKLM\..\Run: [Windows TaskAd] C:\Program Files\Windows TaskAd\WinTaskAd[Caution: ExecutableFile] O4 - HKLM\..\Run: [surfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk[Caution: ExecutableFile] O4 - HKCU\..\Run: [surfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab What do you (or anyone else) know about this? O4 - HKLM\..\Run: [DeadAIM] rundll32[Caution: ExecutableFile] "C:\Program Files\aim\\DeadAIM.ocm",ExportedCheckODLs And I suspect this program has been censored O4 - HKLM\..\Run: [*] C:\WINDOWS\system32\*[Caution: Executable File] O20 - Winlogon Notify: * - C:\WINDOWS\SYSTEM32\*.dll If you know what it is, then leave it, if you don't know what it is, erm, pm me and find a way to get around the censor. But be aware that this is very naughty ;) (but you don't mind do you grin? :P ...or do you?) Then resart your pc and post another log.

Sometimes there's a light that flashes when it's "thinking" (processing.)

Yeah it was temporarily.

Lest we forget.

Please scan with Ad-Aware SE and Spybot S&D, then post a Hijackthis log back here. Google for links.

To the trendmicro scan, then Ad-Aware, then Spybot S&D. Then post another hijackthis log. Not having any sound is probably related to your sound card drivers. My computer -> properties -> hardware -> device manager. Get the name of your sound card manufacturer and then go to their website. Download the latest driver and install it.

Oh yea, explr is my personal keylogger, great way to manage what goes on in my computer :wink: Lol :| You do relise I think it's illegal if you don't tell people you're doing it.

This is a known problem, with many and varied soloutions. Try going to about:config and toggling "network.dns.disableIPv6" to "true"

Do your best getting a firewall up and running :-? C:\WINDOWS\system32\explr[Caution: ExecutableFile] and O20 - Winlogon Notify: explr - C:\WINDOWS\SYSTEM32\explr.dll ?? Do you know anything about these? Oh and O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) Isn't doing anything at all ;)

Odd. I don't have any solutions :-?

Tools -> options -> Privacy -> cache. Clear. Otherwise... does it work in any other browsers you have on your pc?

Have you recently loaded any new themes or extensions? Are you using 1.0.3? Try reloading the page using ctrl + r. Try starting firefox in safe mode. Start -> Run -> firefox.exe -safe-mode

If you know that you powerpoint, you may have accidentally deleted it from your start menu. Go to My computer, and then C:\Program Files\Microsoft Office\Office10 (or whatever version you have) and see if Powerpnt[Caution: ExecutableFile] is in there.

use the RS Client for RS, and FF for everything else! :D

You should get a Firewall if you've not got one already. Sygate, Zonealarm and Tiny Personal Firewall are all fre and good. Additionally, post a Hijackthis log so that we can check to see the worm has been properly removed. Google for the links to the programs.

http://forum.tip.it/search.php This is because Jagex has coded their game only to play sounds in IE. They are currently working on getting it to play sound in Firefox and other browsers.

Hmm, that's odd. Does it spped up progressivly (like, 1 minute every 24 hours) or did it happen all at once? Go to the time and date thing and check if it's synchronising with an internet server. If it is, turn it off, if it isn't, turn it on. Also, did you recently replace the battery in your motherboard?

Bookmarks are stored in (for windows XP) C:\Documents and Settings\%username\Application Data\Mozilla\Firefox\Profiles\8dgtrndm.Yourname\bookmarks.html cookies in cookies.txt, etc. The files sometimes get corrupted if you turn your pc off at the plug. I don't understand why they don't just get it to make a backup each time you start it or something, but I daresay that's in the pipeline somewhere.

That's a known issue unfortunately. It often happens if you turn your pc off at the switch without shutting it down, or there's a blackout or something. Create a new profile (Start -> Run -> Firefox[Caution: ExecutableFile] -profilemanager) and start from scratch. I suggest you install the Bookmark backup extension. It automatically backs up important files in your profile (bookmarks, saved passwords, cookies, history, preferences) up to a week in the past so that should an error such as you've experienced occur, you can simply revert to the backed up files. Sorry about this mate, you can bet the devs are working hard to fix the issue.

Novice users beware, these are advanced configuration settings and should be modified with care, if at all. Why does Firetune need to be an exe? Why can't they just make it an extension? Personally, I've modified these setting manually without the use of any other programs. A slight increase in speed, but not all that much.

PRONoMgr is by Intel and is the configuration and diagnostic console for their PRO Ethernet adapter. Nwiz is Nvidia's (graphics card.) I've no idea what xfire is, my brother installed it. I think it's for online multiplayer caming or some such thing. Shouldn't be affecting IE anyway.