appeal of California on the malicious files
I got a call from California today 02/01/12 to a woman who said she called windows users due to a threat of malicious files sent through windows. Does anyone have knowledge of this? It sounded as if it would cause a problem.
Hello
Its a SCAM!
Avoid scams to phone for tech support
http://www.Microsoft.com/security/online-privacy/avoid-phone-scams.aspx
In the United States, you can contact the FBI, Attorney general, the police authorities and consumer
Watch groups. Arm yourself with knowledge.
No, Microsoft wouldn't you not solicited. Or they would know if errors exist on your
computer. So that's the fraud or scams to get your money or worse to steal your identity.
Avoid scams that use the Microsoft name fraudulently - Microsoft is not unsolicited
phone calls to help you fix your computer
http://www.Microsoft.com/protect/fraud/phishing/msName.aspx
Scams and hoaxes
http://support.Microsoft.com/contactus/cu_sc_virsec_master?ws=support#tab3
Microsoft Support Center consumer
https://consumersecuritysupport.Microsoft.com/default.aspx?altbrand=true&SD=GN&ln=en-us&St=1&wfxredirect=1&gssnb=1
Microsoft technical support
http://support.Microsoft.com/contactus/?ws=support#TAB0
Microsoft - contact technical support
http://Windows.Microsoft.com/en-us/Windows/help/contact-support
I hope this helps.
Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">
Tags: Windows
Similar Questions
-
Original title: www.ammyy.com
I get a call from French-speaking technicians India asking me to go to www.ammyy.com, then they can fix some malicious files on my computer. Say that they are associated with Microsoft. Is it a scam?
I get a call from French-speaking technicians India asking me to go to www.ammyy.com, then they can fix some malicious files on my computer. Say that they are associated with Microsoft. Is it a scam?
Yes.
In general, when it comes to people allegedly knowing things about your stuff, they have no access - if you do not start a call, it's a scam.
-
What are the location of the suspicious files if the system is infected by infection sality?
Hello
u can tell me that the location of the malicious files in the system is infected with sality delete manuallyThis can help
-
Norton 360 has popped up a message 'file insight' associated with a file that has been downloaded on my PC. The source file was Firefox.exe, and the name of the file is RadioWMPCoreGecko19.dll
Some sites refer to this file as malicious, but it seems to me that it is a plugin for firefox extension? Can you explain me this file?See also [878063/questions/878063]
-
Impossible to download whatever it is, said "windows could not open the exe file.
Once I had deleted all my music in win.med.player. sence then I can't download/open/save everything that is associated with one, "-.» File "EXE" or binary.? " Help, please.
Hello
1. what operating system do you use?
2. it happens with all the exe files?
3. What are the files he did remove WMP?
I suggest you try the methods mentioned below and check if it helps:
Method 1:
You are unable to start a program with an .exe File Extension (applies to Windows XP)
http://support.Microsoft.com/kb/310585
Method 2:
You can also scan your computer the Microsoft Security Scanner, which would help us to get rid of viruses, spyware and other malicious software.
The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.
http://www.Microsoft.com/security/scanner/en-us/default.aspx
Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.
Note: The data files that are infected must be cleaned only by removing the file completely, which means that there is a risk of data loss.
Hope this information is useful.
-
Corrected the host file corrupted, now showing 2 host files in XP
I have a corrupt host file and 2 host files have now for some reason any. What to do to fix this?
After explaining all this several times, here are some notes:
The hosts file is a read-only file, hidden system. It is just a text file that you can manipulate with WordPad, Notepad or any text editor. Before you modify the hosts file, make a copy of the current in case you need to restore the original.
The hosts file is (or should be) a file read-only, which means that if change you it, you will not be able to save the changes until you remove the read only attribute of the file.
You may be able to create a new one or reset your hosts with Microsoft Help file:
http://support.Microsoft.com/kb/972034 (this does work as expected the last time I tried).
If you use the Fix It from Microsoft, you will have no hosts file when you're done (which is not necessarily a bad thing) so you can just read and follow the instructions to find out how to fix it yourself.
Some third-party software analysis tools (like Spybot) may add entries to the hosts file on purpose to block your browser from loading WWW websites completely or block ads from certain sites WWW. They claim to have a list of sites that most of the people want to block and insert them into your file hosts for you. You can always delete the entries in the hosts file manually if you wish.
Another good option to block ads sites is to use Firefox with the Adblock Plus extension (it is updated regularly with new sites). If you use that combination, you don't have to worry about your hosts file and these two together really do a good job.
Malware can also add entries in the host file to redirect the browser to another site than the one you really want to visit WWW.
For example, if you try to browse to www.google.com, you can find yourself on a WWW site that is inappropriate or simply an advertisement for a product you never heard and do not want. Your browser will always be redirected away from www.google.com until correct you the hosts file.
The malware can also modify your hosts file to block your browser to go to Web sites where you might find a solution for how to remove the malicious software. The malware sometimes knows what you're going to try to find and remove, so it will prevent you to do so.
If your hosts file has been manipulated by malware, edit the hosts file does not remove the malware. You will still need to scan your system with software tools to make sure that the malware has entirely disappeared.
Malware analysis tools can also remove the malicious software and leave the bad entries in the hosts file. Analytical tools cannot tell if the entries in the file hosts were made on purpose or by malware you still may need to edit the file hosts manually in case of redirection of the browser once the malware has been removed.
Some analytical tools will report changes to the hosts as a suspect file and allow you to review the changes and allow you to decide whether the changes are appropriate, and to take action.
Sometimes, analytical tools cannot tell if the entries in the hosts file have been put there by malicious software or you put there on purpose so cannot do not report any problems with the hosts file. This does not mean that the hosts file has not been adjusted by malicious software.
A hosts file is not required for your browser to operate. If you suspect a problem with the hosts file, you can rename the hosts file and test your browsing without it.
Always reboot your system and the navigation test after making changes to the hosts file.
To manipulate the hosts file, you need to make hidden files not hidden and remove the attribute only read the hosts file.
In Explorer, navigate to the following folder (assuming that Windows is installed on your C drive):
c:\Windows\system32\drivers\etc
Click on tools. Of files, display options. In advanced settings, enable (check) the box option for:
Display the hidden files and folders
Click OK.
The hosts file has also no extension (for example, .exe or .doc) and it may be useful to also see the file extensions for all files in
the folder. While you adjust the display of folder options, bring up the file extensions.Click on tools, Options, view. In advanced settings, clear (uncheck) the box:
Hide extensions of known file types
Click OK.
Now the hosts file must be visible and you can also see the file extensions.
Make a copy of the current hosts file and name the copy something he can remember so that you can find it later and cancel
any change if the changes don't work or things get worse.The host file is usually a single reading, so to change it, you must remove the read-only attribute:
Make a right-click the hosts file, properties, uncheck the box that says:
Read-only
Click OK.
Now you can edit the hosts file with a text editor (Notepad, Wordpad). Be sure to save the hosts file after any changes.
You will need to decide what is in your hosts file. The default hosts file has only one entry (and a lot of comments) so if you think that the hosts file are the part of your question, you can remove all but the default entry and save the file.
Always reboot your system and the navigation test after making changes to the hosts file.
You should make hosts read-only folder again when you are finished making changes. Obviously some programs or malware do not pay attention to the attributes of a file read-only, but it is advisable for the host file to be unalterable.
If you want to, reverse explore changes to hide system files and extensions of known file types.
If you think your hosts file is irretrievably, replace the contents with the default values of Windows.
The default for Windows XP hosts file looks like this:
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address must
# be placed in the first column, followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
space #.
#
# In addition, comments (such as these) may be inserted on individual
# lines or following the name of the machine indicated by a symbol "#".
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host127.0.0.1 localhost
There are places on the Internet to download information to your hosts file which is based on what other people think your hosts file must block or allow for your Internet browsing. Sometimes that works very well, but you now need to know more on the manipulation of the hosts file now so that you can decide what's best for your environment.
Here's some additional reading on how to manipulate your hosts file:
http://www.MVPs.org/winhelp2002/hosts.htm
This is a user-friendly tool with a graphical interface (GUI) to help you work on your hosts file:
-
Somehow I have disabled my firewall setting. Says my windows firewall / internet connection sharing service is not started. How can I find out what kind of program does what and what I can disable I need not, I think I have too many unnecessary things running slows down my old pc
First, do some cleaning and analysis. Then determine what you do/don't need. Then more cleaning.
Search for malware:
Download, install, execute, update and perform analyses complete system with the two following applications:
Remove anything they find. Reboot when necessary. (You can uninstall one or both when finished.)
Search online with eSet Online Scanner.
The less you have to run all the time, most things you want to run will perform:
Use Autoruns to understand this all starts when your computer's / when you log in. Look for whatever it is you do not know using Google (or ask here.) You can hopefully figure out if there are things from when your computer does (or connect) you don't not need and then configure them (through their own built-in mechanisms is the preferred method) so they do not - start using your resources without reason.
You can download and use Process Explorer to see exactly what is taking your time processor/CPU and memory. This can help you to identify applications that you might want to consider alternatives for and get rid of all together.
Do a house cleaning and the dust of this hard drive:
You can free up disk space (will also help get rid of the things that you do not use) through the following steps:
Windows XP should take between 4.5 and 9 GB * with * an Office suite, editing Photo software, alternative Internet browser (s), various Internet plugins and a host of other things installed.
If you are comfortable with the stability of your system, you can delete the uninstall of patches which has installed Windows XP...
http://www3.TELUS.NET/dandemar/spack.htm
(Especially of interest here - #4)
(Variant: http://www.dougknox.com/xp/utils/xp_hotfix_backup.htm )You can run disk - integrated into Windows XP - cleanup to erase everything except your last restore point and yet more 'free '... files cleaning
How to use disk cleanup
http://support.Microsoft.com/kb/310312You can disable hibernation if it is enabled and you do not...
When you Hibernate your computer, Windows saves the contents of the system memory in the hiberfil.sys file. As a result, the size of the hiberfil.sys file will always be equal to the amount of physical memory in your system. If you don't use the Hibernate feature and want to reclaim the space used by Windows for the hiberfil.sys file, perform the following steps:
-Start the Control Panel Power Options applet (go to start, settings, Control Panel, and then click Power Options).
-Select the Hibernate tab, uncheck "Activate the hibernation", and then click OK. Although you might think otherwise, selecting never under "Hibernate" option on the power management tab does not delete the hiberfil.sys file.
-Windows remove the "Hibernate" option on the power management tab and delete the hiberfil.sys file.You can control the amount of space your system restore can use...
1. Click Start, right click my computer and then click Properties.
2. click on the System Restore tab.
3. highlight one of your readers (or C: If you only) and click on the button "settings".
4 change the percentage of disk space you want to allow... I suggest moving the slider until you have about 1 GB (1024 MB or close to that...)
5. click on OK. Then click OK again.You can control the amount of space used may or may not temporary Internet files...
Empty the temporary Internet files and reduce the size, that it stores a size between 64 MB and 128 MB...
-Open a copy of Microsoft Internet Explorer.
-Select TOOLS - Internet Options.
-On the general tab in the section 'Temporary Internet files', follow these steps:
-Click on 'Delete the Cookies' (click OK)
-Click on "Settings" and change the "amount of disk space to use: ' something between 64 MB and 128 MB. (There may be many more now.)
-Click OK.
-Click on 'Delete files', then select "Delete all offline content" (the box), and then click OK. (If you had a LOT, it can take 2 to 10 minutes or more).
-Once it's done, click OK, close Internet Explorer, open Internet Explorer.You can use an application that scans your system for the log files and temporary files and use it to get rid of those who:
CCleaner (free!)
http://www.CCleaner.com/
(just disk cleanup - do not play with the part of the registry for the moment)Other ways to free up space...
SequoiaView
http://www.win.Tue.nl/SequoiaView/JDiskReport
http://www.jgoodies.com/freeware/JDiskReport/index.htmlThose who can help you discover visually where all space is used. Then, you can determine what to do.
After that - you want to check any physical errors and fix everything for efficient access"
CHKDSK
How to scan your disks for errors* will take time and a reboot.Defragment
How to defragment your hard drives* will take timeCleaning the components of update on your Windows XP computer
While probably not 100% necessary-, it is probably a good idea at this time to ensure that you continue to get the updates you need. This will help you ensure that your system update is ready to do it for you.
Download and run the MSRT tool manually:
http://www.Microsoft.com/security/malwareremove/default.mspx
(Ignore the details and download the tool to download and save to your desktop, run it.)Reset.
Download/install the latest program Windows installation (for your operating system):
(Windows XP 32-bit: WindowsXP-KB942288-v3 - x 86 .exe )
(Download and save it to your desktop, run it.)Reset.
and...
Download the latest version of Windows Update (x 86) agent here:
http://go.Microsoft.com/fwlink/?LinkId=91237
... and save it to the root of your C:\ drive. After you register on theroot of the C:\ drive, follow these steps:Close all Internet Explorer Windows and other applications.
AutoScan--> RUN and type:
%SystemDrive%\windowsupdateagent30-x86.exe /WUFORCE
--> Click OK.(If asked, select 'Run'). --> Click on NEXT--> select 'I agree' and click NEXT--> where he completed the installation, click "Finish"...
Reset.
Now reset your Windows with this FixIt components update (you * NOT * use the aggressive version):
How to reset the Windows Update components?Reset.
Now that your system is generally free of malicious software (assuming you have an AntiVirus application), you've cleaned the "additional applications" that could be running and picking up your precious memory and the processor, you have authorized out of valuable and makes disk space as there are no problems with the drive itself and your Windows Update components are updates and should work fine - it is only only one other thing youpouvez wish to make:
Get and install the hardware device last drivers for your system hardware/system manufacturers support and/or download web site.
-
OneCare was 'arrested' will not restart
Wireless networks - does not and cannot correct
No program will run if I'm in safe mode
I did a virus scan with the malicious software removal tool, nothing was found.
I write this on my netbook - I can't have my laptop online.
I have no idea what to try next. I need my laptop! Help, pleaseHello laughingpaws,
To help resolve this issue, use the System File Checker (SFC.exe) tool to determine which file is causing the problem and then replace the file. To do this, follow these steps:
- Open an elevated command prompt. To do this, click Start, click principally made programs, Accessories, right-click guest, and then click run as administrator. If you are prompted for an administrator password or a confirmation, type the password, or click allow.
- Type the following command and press ENTER: sfc/scannow sfc/scannow command analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions.
Hope this helps you. Let us know anyway. Make it a great day!
"And in the end the love you take, is equal to The Love You Make" (The Beatles last song from their latest album, Abbey Road.)
-
I got a phone call offering to clear my computer of malicious files
Original title: telephone contact - maintenance
I got a phone call offering to clear my malicious files - remote computer or showing them myself first. I share the concerns that I had never heard of the vocations of the front window, and she says it's easier than sending electronic mail. Gave me a phone number to ring - did this prople first two could not tell me the name of the company. Third said there was a lot of interference, but it was way windows to communicate with the direct users. I refused to continue with them.
If there are programs that are passed my security systems - which would be the best way to check - I fear that, as I was contacted were not legitimate — they can be able to communicate with my computer.
Anne C
Its a scam, MS does not call the end users or any other party call end users, unlessyou have initiated the call
-
It is the only virus I have it please help I am so close to fixing my computer I managed comprehensive analyses on all programs that they detect this virus but I always eventually have and redirected to Web sites randomly please tell me if possible how do I manually remove this
Hello
If you need search malware here's my recommendations - they will allow you to
scrutiny and the withdrawal without ending up with a load of spyware programs running
resident who can cause as many questions as the malware and may be more difficult to detect as the
cause.No one program cannot be used to detect and remove any malware. Added that often easy
to detect malicious software often comes with a much harder to detect and remove the payload. Then
its best to be thorough than paying the high price later now too. Check with them to one
extreme overkill point and then run the cleaning only when you are sure that the system is clean.It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
the regular windows when you can.Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
(If Rootkits run UnHackMe)Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Malwarebytes - free
http://www.Malwarebytes.org/Run the malware removal tool from Microsoft
Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.
You should get this tool and its updates via Windows updates - if necessary, you can
Download it here.Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)Microsoft Malicious - 32-bit removal tool
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enMicrosoft Malicious removal tool - 64 bit
http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=enalso install Prevx to be sure that it is all gone.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
here or use Google to see how to remove.
http://www.prevx.com/ <-->
http://info.prevx.com/downloadcsi.asp <-->Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.aspTry the demo version of Hitman Pro:
Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
(viruses, Trojans, rootkits, etc.). who infected your computer despite safe
what you have done (such as antivirus, firewall, etc.).
http://www.SurfRight.nl/en/hitmanpro--------------------------------------------------------
If necessary here are some free online scanners to help the
http://www.eset.com/onlinescan/
New Vista and Windows 7 version
http://OneCare.live.com/site/en-us/Center/whatsnew.htmOriginal version
http://OneCare.live.com/site/en-us/default.htmhttp://www.Kaspersky.com/virusscanner
Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1--------------------------------------------------------
Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
system files.Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup
Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
RUN AS ADMINEnter this at the command prompt - sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker
(SFC.exe) program generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html-----------------------------------------------------------------------
If we find Rootkits use this thread and other suggestions. (Run UnHackMe)
I hope this helps.
Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.
-
Problems with the .exe file programs + System Restore does not respond when you click
I have Windows Vista. This problem started a week ago. I tried at first to use my "ccleraner" already installed, but this program does not open when you click on it. I was asked to choose the program that the application to use to open it. This has also happened when clicking on itunes. My avast program when you click also asked which application is required to open it. When it finally scanned my system it does no propblems. In addition, I tried to turn on windows defendrer as he told me that it was off. Clicked on 'Turn on..' and nothing happened. Help!
Hello
See the following message to solve the problem of .exe if necessary once you are sure that the system is clean.
Try Mode safe mode with networking - repeatedly, press F8 that you start.
The best two methods allow scanners to run and/or AV.exe out of the way or removing.
1.
CTRL SHIFT ESC - task manager OR right click on the taskbar - task managerProcess tab - complete the process on AV. EXE and continue with the uninstall Guide.
If necessary use start - computer or Windows Explorer to navigate to
C:\Program Malwarebytes Anti - Malware\mbam.exe or where it is installed - if
necessary right click on the shortcut of Malwarebytes - Properties - tab - target line to see where it
is installed.Right-click on it and rename it to ZZMbam.COM (or something different than now), then
Double-click it and run it like this. You can rename it back later. Do the same with others
programs as needed. Use this method for other necessary - DO NOT ASSUMER one
program removes all or that there is no other malware.---------------------------------------------------
2.
Another method is to use them:Use Process Explorer to "Suspend" the process will not stop
Then use AutoRuns to delete the malicious program startup items.
Now use UnLocker to delete the files in the malware.
You may need to do a file at a time.
Process Explorer - free
http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspxAutoRuns - free
http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspxUnLocker - free (do not install the adaware Ebay)
http://www.Softpedia.com/get/system/system-miscellaneous/unlocker.shtmlAV.exe
==============================================
There are MANY varieties of these with many names, but all can be eliminated with the same methods:
Win 7 Antispyware 2010 XP Internet Security 2010 and Vista Antivirus 2010 is rogue antivirus.
scams to get you to pay for them while they have no advantage at all.How to remove all THE varieties of this malware - please read carefully the removal Instructions.
http://www.bleepingcomputer.com/virus-removal/remove-antivirus-Vista-2010RENAME this as necessary to allow them to perform: (use a different name with the extension .COM instead of .exe)
It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run the
in the regular when windows you can.Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone. (If Rootkits
UnHackMe execution)Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Malwarebytes - free
http://www.Malwarebytes.org/Run the malware removal tool from Microsoft
Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.
You should get this tool and its updates via Windows updates - if necessary, you can download
here.Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)Microsoft Malicious - 32-bit removal tool
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enMicrosoft Malicious removal tool - 64 bit
http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=enalso install Prevx to be sure that it is all gone.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs.
It is a single scanner, VERY EFFICIENT, if it finds something to come back here or use Google to see
How to remove.
http://www.prevx.com/ <-->
http://info.prevx.com/downloadcsi.asp <-->Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.aspTry the demo version of Hitman Pro:
Hitman Pro is a second scanner reviews, designed to save your computer from malicious software (viruses,
Trojan horses, rootkits, etc.). that has infected your computer despite all security measures that you have
taken (such as the anti-virus software, firewall, etc.).
http://www.SurfRight.nl/en/hitmanpro--------------------------------------------------------
If necessary here are some free online scanners to help the
http://www.eset.com/onlinescan/
http://OneCare.live.com/site/en-us/default.htm
http://www.Kaspersky.com/virusscanner
Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1--------------------------------------------------------
Also do to the General corruption of cleaning and repair/replace damaged/missing system files.
Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup
Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN
Enter this at the command prompt - sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html-----------------------------------------------------------------------
If we find Rootkits use this thread and other suggestions. (Run UnHackMe)
I hope this helps.
Rob - bicycle - Mark Twain said it is good.
-
I play games online and have recently my hacked account. Malwarebytes antivirus I've done, I ran the scan we found several infected files that have been processed and removed. I then scanned by using the onecare Center and she always found 7 infected files 5 threats that all listed as Trojans java program errors before the end. I guess my real question is is this a key logger any?, how can I remove the dam thing, or is just a case of restart and reinstall vista from scratch?
Hello
Not a single program can detect or remove all malware. Added that often easy to detect the malware comes
by a harder to detect and remove the payload. Better to overkill the process now that in order to pay the high price
an hour later.It can be made repeatedly in Mode safe - F8 tap that you start, however you must also run them
the Windows when you can.Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone. (If Rootkits run UnHackMe)
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Malwarebytes - free
http://www.Malwarebytes.org/Run the malware removal tool from Microsoft
Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.
You should get this tool and its updates via Windows updates - if necessary, you can download it here.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)Microsoft Malicious - 32-bit removal tool
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enMicrosoft Malicious removal tool - 64 bit
http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=enalso install Prevx to be sure that it is all gone.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
http://www.prevx.com/ <-->
http://info.prevx.com/downloadcsi.asp <-->Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.asp--------------------------------------------------------
If necessary here are some free online scanners to help the
http://www.eset.com/onlinescan/
http://www.Kaspersky.com/virusscanner
Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1--------------------------------------------------------
Also do to the General corruption of cleaning and repair/replace damaged/missing system files.
Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup
Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN
Enter this at the command prompt - sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html-----------------------------------------------------------------------
If we find Rootkits use this thread and other suggestions. (Run UnHackMe)
I hope this helps.
Rob - bicycle - Mark Twain said it is good.
-
Missing icons on the open file dialogue box
I am running Windows 7 Professional (64 bit). All updates applied.
Problem: When you use the dialog box open file - some file/folder icons are missing. Not that big of a deal, but introduce that dialog open file in an application they may crash. I think this may be the cause.
Details: When I use Windows Explorer, everything seems as it should be in the Navigation pane. For example, I see Favorites and Desktop under Favorites. The desktop icon is correct. Everything is as it should be. If I open Wordpad, and then select file open, the dialog box is, once again, as it should. All the icons displayed. However, if I open Word 2007 and select the open file, there is a strange icon for the office and most of the other items under Favorites, some of my libraries display one appropriate icon, others do not. In the right pane (where the files are listed), there are no icons for files at all, they are simply empty. I can select the files, then open them, everything works, just no icons. It is not only the Microsoft Office applications that illustrate this. If I open the VLC media player, select media, open a file. I have the same thing (missing icons).
I could live with that, but it seems to cause some applications (applications specifically Flash) to hang when I try to open the files. For example, if I try to upload a photo to Snapfish.com using the Flash application, it crashes every time than IE when the open file dialog box opens. Exactly the same happens using the Chrome browser. Everything works fine as long as I do not open the open file dialog box.
Any suggestions?
Thank you
Jonathan
Hello Jonathan Moeller.
There are a few additional troubleshooting steps that we could proceed to isolate or fix this problem. Just to inform you beforehand, if in fact it is malicious viral content on your system or base operating system files are potentially corrupt. I might suggest a repair installation. This would be the last option or suggestion.
-Open the prompt (run as administrator) and type SFC/scannow
-Create an another user account (Admin) and check if in fact you are still having this problem
-Turn your computer into a cleanboot scenerio to isolate if a 3rd party service is potentially the first cause of this issue. Here are the steps...
Step 1: Open the System Configuration utility
ClickStart
type msconfig in theSearch box and press ENTER.
If you are prompted for an administrator password or a confirmation, type the password, or provide confirmation.
Step 2: Configure selective startup options
1. in theSystem Configuration utility dialog box, click Selective startup on thegeneral tab.
2 clear theLoad Startup items check box.
Note The check boxuse the Boot file is not available.
3. click on theServices tab.
4. Click to select thehide all Microsoft Services check box.
5. click ondisable alland then click OK.
6. When you are prompted, clickrestart.
-In addition, please try to rebuild the indexing function. Here are the steps...
1. go into the Control Panel.
2 display All the items from Control Panel by changing the parameter display by in the upper right corner of thelarge icons or small iconscategory.
3. Select Indexing Options.
4. click on the Advanced button.
5. when the UAC prompt appears, click continue.
6. in the Troubleshooting section, click on the button to rebuild
-In addition, each local user account have their Iconcache.db file or database is located at c:\users\Username\appdata\local\iconcache.db. Please remove this file. However, it is preferable that you simply follow the steps below. Everything must be simple to follow.
Re-create the file icon-Cache by deleting
- Each user has its own file named Iconcache.db: USERPROFILE%\AppData\Local\Iconcache.db
- Close all the explorer.exe process using the Task Manager (or else it will create a bad file during the closing session/restart)... Go to the processes tab and locate explorer.exe and right-click on it and select end process tree tree/end of tasks
- Use the Task Manager (CTRL + SHIFT + ESC) to launch the explorer.exe again... Once you open the Task Manager, click file, new task. type 'explorer.exe '... All of your icons should reappear with the taskbar. You may need to shut down or restart your computer. Please check if you are able to see your icons with success.
If you please follow on this thread at the earliest, I would be very happy. I look forward to hear from you. Have a great day.
Thank you
Aaron
Aaron
Microsoft Answers Support Engineer
Visit our Microsoft answers feedback Forum and let us know what you think -
Huge problem, cannot delete the WAV file.
I have the WAV file on my desktop that I can't move, delete, rename or the properties view. It is a way by using 100% of my CPU and slow down at all.
Whenever I try to delete it, it says "preparing to recycle...". "and never finished.
I'm about to reinstall my operating system because I don't know any other solution.
Hello
Run the check point kill too extreme.
If you need search malware here's my recommendations - they will allow you to
scrutiny and the withdrawal without ending up with a load of spyware programs running
resident who can cause as many questions as the malware and may be more difficult to detect as the
cause.No one program cannot be used to detect and remove any malware. Added that often easy
to detect malicious software often comes with a much harder to detect and remove the payload. Then
its best to be thorough than paying the high price later now too. Check with them to one
extreme overkill point and then run the cleaning only when you are sure that the system is clean.It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
the regular windows when you can.Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
(If Rootkits run UnHackMe)Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Malwarebytes - free
http://www.Malwarebytes.org/Run the malware removal tool from Microsoft
Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.
You should get this tool and its updates via Windows updates - if necessary, you can
Download it here.Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)Microsoft Malicious - 32-bit removal tool
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enMicrosoft Malicious removal tool - 64 bit
http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=enalso install Prevx to be sure that it is all gone.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
here or use Google to see how to remove.
http://www.prevx.com/ <-->
http://info.prevx.com/downloadcsi.asp <-->Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.aspTry the demo version of Hitman Pro:
Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
(viruses, Trojans, rootkits, etc.). who infected your computer despite safe
what you have done (such as antivirus, firewall, etc.).
http://www.SurfRight.nl/en/hitmanpro--------------------------------------------------------
If necessary here are some free online scanners to help the
http://www.eset.com/onlinescan/
New Vista and Windows 7 version
http://OneCare.live.com/site/en-us/Center/whatsnew.htmOriginal version
http://OneCare.live.com/site/en-us/default.htmhttp://www.Kaspersky.com/virusscanner
Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1--------------------------------------------------------
After the removal of malicious programs:
Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
system files.Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN
Enter this at the command prompt - sfc/scannow
How to fix the system files of Windows 7 with the System File Checker
http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.htmlHow to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Also run CheckDisk, so we cannot exclude as much as possible of the corruption.
How to run check disk in Windows 7
http://www.SevenForums.com/tutorials/433-disk-check.html-----------------------------------------------------------------------
If we find Rootkits use this thread and other suggestions. (Run UnHackMe)
======================================
If necessary AFTER THAT you are sure that the machine is clean of any malware.
How to do a repair installation to repair Windows 7
http://www.SevenForums.com/tutorials/3413-repair-install.htmlI hope this helps.
Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.
-
run the Idoc function in the data file returned by the service of GET_FILE
Hello
I'm new to this forum, so thank you in advance for any help and forgive me of any error with the post.
I'm trying to force the execution of a custom Idoc function in a data file Complutense University of MADRID, when this data file is requested from the University Complutense of MADRID through service GET_FILE.
The custom Idoc function is implemented as a filter of the computeFunction type. One of the datafile has appealed to my custom Idoc function:
* < name wcm:element = "MainText" > [! - $myIdocFunction ()-] < / wcm:element > *.
The data file is then downloaded with CRMI via service GET_FILE, but the Idoc function is not called.
I tried to implement another filter Idoc type sendDataForServerResponse or sendDataForServerResponseBytes, that store objects cached responseString and responseBytes, personalized in order to look for any call to my function in the response object Idoc, eventually run the Idoc function and replace the output of the Idoc in the response. But this kind of filter will never run.
The Idoc function myIdocFunction is executed correctly when I use WCM_PLACEHOLDER service to get a RegionTemplate (file .hcsp) associated with the data file. In this case, the fact RegionTemplate refers to the element of "MainText" data file with <!-$wcmElement ("MainText")->. But I need to make it work also with service GET_FILE.
I use version 11.1.1.3.0 UCM.
Any suggestion?
Thank you very much
FrancescoHello
Thank you very much for your help and sorry for this late reply.
Your trick to activate the complete detailed follow-up was helpful, because I found out I could somehow use the filter prepareForFileResponse for my purpose and I could also have related to the implementation of the native filter pdfwatermark. PdfwFileFilter .
I managed to set up a filter whose purpose is to force the Idoc assessment of a predefined list of functions Idoc on the output returned by the service GET_FILE. Then I paste the code I have written, in which case it may be useful for other people. In any case, know that this filter can cause performance problems, which must be considered carefully in your own use cases.
First set the filter in the set of filters in file .hda from your device:
Filters @ResultSet
4
type
location
parameter
loadOrder
prepareForFileResponse
mysamplecomponent. ForceIdocEvaluationFilter
null
1
@end
Here is a simplified version of the implementation of the filter:
/ public class ForceIdocEvaluationFilter implements FilterImplementor {}
public int doFilter (workspace ws, linking DataBinder, ExecutionContext ctx) survey DataException, ServiceException {}
Service string = binder.getLocal ("IdcService");
String dDocName = binder.getLocal ("dDocName");
Boolean isInternalCall = Boolean.parseBoolean (binder.getLocal ("isInternalCall"));
If ((ctx instanceof FileService) & service.equals ("GET_FILE") &! isInternalCall) {}
FileService fileService = ctx (FileService);
checkToForceIdocEvaluation (dDocName, fileService);
}
continue with other filters
Back to CONTINUE;
}
' Private Sub checkToForceIdocEvaluation (String dDocName, FileService fileService) throws DataException, ServiceException {}
PrimaryFile file = IOUtils.getContentPrimaryFile (dDocName);
Ext = FileUtils.getExtension (primaryFile.getPath ());
If (ext.equalsIgnoreCase ("xml")) {}
forceIdocEvaluation (primaryFile, fileService);
}
}
forceIdocEvaluation Private Sub (file primaryFile FileService fileService) throws ServiceException {}
String multiplesContent = IOUtils.readStringFromFile (primaryFile);
Replacement ForceIdocEvaluationPatternReplacer = new ForceIdocEvaluationPatternReplacer (fileService);
String replacedContent = replacer.replace (fileContent);
If (replacer.isMatchFound ()) {}
setNewOutputOfService (fileService, replacedContent);
}
}
' Private Sub setNewOutputOfService (FileService fileService, String newOutput) throws ServiceException {}
File newOutputFile = IOUtils.createTemporaryFile ("xml");
IOUtils.saveFile (newOutput, newOutputFile);
fileService.setFile (newOutputFile.getPath ());
}
}
public class IOUtils {}
public static getContentPrimaryFile (String dDocName) survey DataException, ServiceException {queue
DataBinder serviceBinder = new DataBinder();
serviceBinder.m_isExternalRequest = false;
serviceBinder.putLocal ("IdcService", "GET_FILE");
serviceBinder.putLocal ("dDocName", dDocName);
serviceBinder.putLocal ("RevisionSelectionMethod", "Latest");
serviceBinder.putLocal ("isInternalCall", "true");
ServiceUtils.executeService (serviceBinder);
String vaultFileName = DirectoryLocator.computeVaultFileName (serviceBinder);
String vaultFilePath = DirectoryLocator.computeVaultPath (vaultFileName, serviceBinder);
return new File (vaultFilePath);
}
public static String readStringFromFile (File sourceFile) throws ServiceException {}
try {}
return FileUtils.loadFile (sourceFile.getPath (), null, new String [] {"UTF - 8"});
} catch (IOException e) {}
throw new ServiceException (e);
}
}
Public Shared Sub saveFile (String source, destination of the file) throws ServiceException {}
FileUtils.writeFile (source, destination, "UTF - 8", 0, "is not save file" + destination);
}
public static getTemporaryFilesDir() leader throws ServiceException {}
String idcDir = SharedObjects.getEnvironmentValue ("IntradocDir");
String tmpDir = idcDir + "custom/MySampleComponent";
FileUtils.checkOrCreateDirectory (tmpDir, 1);
return new File (tmpDir);
}
public static createTemporaryFile (String fileExtension) leader throws ServiceException {}
try {}
The file TmpFile = File.createTempFile ("tmp", "." + fileExtension, IOUtils.getTemporaryFilesDir ());
tmpFile.deleteOnExit ();
return tmpFile;
} catch (IOException e) {}
throw new ServiceException (e);
}
}
}
Public MustInherit class PatternReplacer {}
Private boolean matchFound = false;
public string replace (CharSequence sourceString) throws ServiceException {}
Matcher m = expand () .matcher (sourceString);
StringBuffer sb = new StringBuffer (sourceString.length ());
matchFound = false;
While (m.find ()) {}
matchFound = true;
String matchedText = m.group (0);
String replacement = doReplace (matchedText);
m.appendReplacement (sb, Matcher.quoteReplacement (replacement));
}
m.appendTail (sb);
Return sb.toString ();
}
protected abstract String doReplace(String textToReplace) throws ServiceException;
public abstract Pattern getPattern() throws ServiceException;
public boolean isMatchFound() {}
Return matchFound;
}
}
SerializableAttribute public class ForceIdocEvaluationPatternReplacer extends PatternReplacer {}
private ExecutionContext ctx;
idocPattern private model;
public ForceIdocEvaluationPatternReplacer (ExecutionContext ctx) {}
This.ctx = ctx;
}
@Override
public getPattern() model throws ServiceException {}
If (idocPattern == null) {}
List of the
functions = SharedObjects.getEnvValueAsList ("forceidocevaluation.functionlist"); idocPattern = IdocUtils.createIdocPattern (functions);
}
Return idocPattern;
}
@Override
protected String doReplace(String idocFunction) throws ServiceException {}
Return IdocUtils.executeIdocFunction (ctx, idocFunction);
}
}
public class IdocUtils {}
public static String executeIdocFunction (ExecutionContext ctx, String idocFunction) throws ServiceException {}
idocFunction = convertIdocStyle (idocFunction, IdocStyle.ANGULAR_BRACKETS);
PageMerger activeMerger = (PageMerger) ctx.getCachedObject("PageMerger");
try {}
String output = activeMerger.evaluateScript (idocFunction);
return output;
} catch (Exception e) {}
throw the new ServiceException ("cannot run the Idoc function" + idocFunction, e);
}
}
public enum IdocStyle {}
ANGULAR_BRACKETS,
SQUARE_BRACKETS
}
public static String convertIdocStyle (String idocFunction, IdocStyle destinationStyle) {}
String result = null;
Switch (destinationStyle) {}
case ANGULAR_BRACKETS:
result = idocFunction.replace ("[!-$","<$").replace("--]", "$="">" "]");
break;
case SQUARE_BRACKETS:
result = idocFunction.replace ("<$", "[!--$").replace("$="">", "-] '");
break;
}
return the result;
}
public static model createIdocPattern (
list idocFunctions) throws ServiceException {} If (idocFunctions.isEmpty ()) throw new ServiceException ("list of Idoc functions to create a template for is empty");
StringBuffer patternBuffer = new StringBuffer();
model prefix
patternBuffer.append ("(\\ [\\!--|)")<>
Features GOLD - ed list
for (int i = 0; i)
patternBuffer.append (idocFunctions.get (i));
If (i
}
model suffix
patternBuffer.append ("") (. +?) (--\\]|\\$>)");
String pattern = patternBuffer.toString ();
log.trace ("Functions return Idoc model", model);
Return Pattern.compile (pattern);
}
}
public class ServiceUtils {}
Private Shared Workspace getSystemWorkspace()}
Workspace workspace = null;
WsProvider provider = Providers.getProvider ("SystemDatabase");
If (null! = wsProvider) {}
workspace = wsProvider.getProvider ((workspace));
}
Returns the workspace;
}
getFullUserData private static UserData (String userName, cxt ExecutionContext, workspace ws) throws DataException, ServiceException {}
If (null == ws) {}
WS = getSystemWorkspace();
}
UserData userData is UserStorage.retrieveUserDatabaseProfileDataFull (name of user, ws, null, cxt, true, true);.
ws.releaseConnection ();
return userData;
}
public static executeService (DataBinder binder) Sub survey DataException, ServiceException {}
get a connection to the database
Workspace workspace = getSystemWorkspace();
Look for a value of IdcService
String cmd = binder.getLocal ("IdcService");
If (null == cmd) {}
throw new DataException("!csIdcServiceMissing");
}
get the service definition
ServiceData serviceData = ServiceManager.getFullService (cmd);
If (null == serviceData) {}
throw new DataException (LocaleUtils.encodeMessage ("!")) csNoServiceDefined", null, cmd));
}
create the object for this service
The service = ServiceManager.createService (serviceData.m_classID, workspace, null, Binder, serviceData);
String userName = 'sysadmin ';
UserData fullUserData = getFullUserData (username, service, workspace);
service.setUserData (fullUserData);
Binder.m_environment.put ("REMOTE_USER", username);
try {}
init service do not return HTML
service.setSendFlags (true, true);
create the ServiceHandlers and producers
service.initDelegatedObjects ();
do a safety check
service.globalSecurityCheck ();
prepare for service
service.preActions ();
run the service
service.doActions ();
} catch (ServiceException e) {}
} {Finally
service.cleanUp (true);
If (null! = workspace) {}
workspace.releaseConnection ();
}
}
}
}
Maybe you are looking for
-
Satellite U200 - 10K will beep continuously
Hallo, When I run the satellite U200 - 10K (Vista), from the start, it gives me continuous beep... beepppppp... I can work... I can open applications, but the beep is not going offf. What could be a reason possible to this problem, hardware / softwar
-
error: 0x80072EFD windows uptade
error: 0x80072EFD
-
At the start this morning, I received the message following "services.exe - bad image" and "the application or the DLL...\ShimEng.dll is not a valid Windows image. Is there a simple solution to this problem? If it is ok, the unit freezes then
-
Cannot put computer to sleep without blue screen and crashed
Hi guys, in the 3 months that my PC has been having this strange problem where seemingly randomly it selects to the blue screen and crashed. A few times, it was when I was not even at the computer, and no programs were running. Most of the time there
-
wlidcli.dll error message I tried to install an update from windows, it was not installed successfully, and in the process, I was unable to open windows live mail and windows live photo gallery. I get an error message stating "the program can't star