Message "Surabaya in my birthday..." "at startup

My cousin Windows XP PC displays the message "Surabaya in my birthday please don't kill me..." "at the start. Clearly, it is likely a virus, spread by an infected middle of external storage. But how to remove it?

Hello

Malware scan; If necessary, analytical Mode safe mode with networking.

http://www.bleepingcomputer.com/tutorials/how-to-start-Windows-in-safe-mode/#winxo

Windows XP

Using the F8 method:

  1. Restart your computer.
  2. When the machine starts first, yet once it will list usually some equipment that is installed on your machine, amount of memory, hard drives installed etc. At this point you should tap the F8 key repeatedly until you are presented with a menu of Advanced Options in Windows XP.
  3. Select the Safe Mode with networking option using the arrow keys.
  4. Then press enter on your keyboard to start safe mode.
  5. Make all the necessary tasks and when finished restart to start in normal mode.

Once in Safe Mode with network, download and run RKill.

RKill does NOT remove the malware; It stops the Malware process that gives you a chance to remove it with your security programs.

http://www.bleepingcomputer.com/download/rkill/

Then, download, install, update and scan your system with the free version of Malwarebytes AntiMalware in Mode safe mode with networking:

http://www.Malwarebytes.org/products/malwarebytes_free

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

If something remains after this started, these are the ways to remove it.

"How to use MSCONFIG in Windows XP"

http://www.netsquirrel.com/Msconfig/msconfig_xp.html

"Autoruns for Windows V11.32"

http://TechNet.Microsoft.com/en-us/sysinternals/bb963902

See you soon.

Tags: Windows

Similar Questions

  • Pavilion dv6 notebook pc: internal error message battery low percentage at primary startup 601

    Hi, we have a hp Portable DVD we get a startup message that the internal battery has a low percentage left of pavilions. internal primary 601... I read through some of the questions forum and saw to check the status of the battery I did and he said has failed, he did not give a percentage... The laptop is old, and we don't really want to invest in a new battery.  The laptop can be run on the power supply or the laptop eventually close and never work again? ..... I'm not a techie so answer in simple terms please and thank you as the operating system is a microsoft Windows 7, but I don't know if it's 64-bit or not thanks

    Hello

    You are welcome

    Yes, I mean the power supply.

    Kind regards

    DP - K

  • Lenovo B50 RunDLL CustomEventManager.dll application error message not a Win32 valid at startup

    Dear support staff,

    All of a sudden I have this message that appears at startup on my Lenovo B50. The full path is C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll

    The full error message is:

    RunDLL

    Problem at startup of

    C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll

    C:\ProgramData\Lenovo\iMController\Plugins\LenovoAudioPlugin\x86\CustomEventMonitor.dll is not a valid Win32 application

    I searched the forum, but there is no answer to this problem that I have found yet.

    Thank you in advance for your help!

    Shimon


  • Error message when you try to change startup programs

    Received error 0x800705b4 trying to 'change the startup programs '. When you try to change my startup programs, I got a message that Windows Defender is disabled. When I click on the button to turn on the Defender, I get the message "Microsoft Defender encountered an error: 0x800705b4.» This operation completed because the time-out period expired. "What can I do? I uninstalled Microsoft Security Essentials, because I understand it turns off Defender and then I could change my startup programs, but after that I have re-installed Microsoft Security Essentials, it wouldn't let change me.

    Hello

    MSE, AVG, McAfee, Norton disables Windows Defender program.

    Is the proposed action and nothing to worry about.

    To change startup on Vista via 'msconfig' programs is included in this connection method 2:

    "How to check and change Vista startup programs"

    http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

    And this free Autoruns program is very good for what you want to do:

    «This utility, which has a knowledge of auto-starting locations of any startup monitor, shows you what programs configured to run at system startup or login and that the entries in the order of processing windows.» These programs include those in your startup folder, Run, RunOnce, and other registry keys. You can configure Autoruns to show other locations, including Explorer shell, toolbar extensions, helper objects to the browser, Winlogon notifications, auto and many start-up services even more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.

    Autoruns' hide signed Microsoft entries allows you to zoom in on images of automatic start of third parties who have been added to your system and it has support for looking at images of Autostart configured for other accounts configured on a system. A command-line equivalent that can display in format CSV, Autorunsc is also included in the download package.

    You may be surprised how many executables are launched automatically! »

    http://TechNet.Microsoft.com/en-us/sysinternals/bb963902

    See you soon.

  • Receive the message "card Flash not responding" on startup

    Original title: Problem with this: "FFDshow codec" on toshiba satellite laptop__also, a message "flash card not repsonding ' still on start up.   

    Toshiba satellite laptop computer has the following problems:

    one, "Flash card not respnding" always on startup and the program fix indicates the following problem which they cannot fix: FFDshow codec

    Any help would be appreciated.   Windows Vista operating system

    Hello

    You need to maybe go to support Toshiba and redownload and install the utility. Search the PVAT
    The Toshiba Value Added Package. Also check with Toshiba support and their forums.

    Toshiba left superior support and access your model
    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/home.jsp

    Toshiba - Forums
    http://laptopforums.Toshiba.com/

    Toshiba - Contacts
    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/navShell.jsp?CF=su_contact

    Toshiba - drivers - access your model
    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/home.jsp?NAV=download

    Toshiba - Support
    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/home.jsp

    ============================

    Re-install the Codec FDShow
    FFDSHOW - free
    http://sourceforge.NET/projects/ffdshow/

    I hope this helps.

    Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

  • Satellite C650 - message from the PXE ROM at startup

    My 6 month old Satellite C650 (Windows 7 64-bit) started grippements this afternoon and now will not restart. She gave the following message is displayed after the Toshiba screen:

    PXE - MOF: EXIT INTEL PXE ROM
    NO BOOT DEVICE

    I think that there is a "insert the disk and press a key" after that, but I'm away from home and have not all disks (not sure if there are home either!). So I tried a few off/ons and now does not go as far as the Toshiba screen.

    At a loss - nightmare!

    Obviously HDD is not recognized correctly, but the question is why.
    It's new model of laptop, and you should contact Toshiba service as soon as possible.

    Addresses and phone numbers, you will find under http://eu.computers.toshiba-europe.com > support & downloads > find an ASP.

  • Get the error message about the COM port at startup

    Original title: COM port occupied at startup

    We get busy COM port when the system has been started and given are incoming on port.

    The COM port is connected to a PLC which retransmit if he didn't get a response.

    In this case our application cannot connect to the port.

    Is it possible that we can avoid this or is there a way to release a COM port?

    Thank you

    HR

    Hello

    The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the Forum TechNet site:

    http://social.technet.Microsoft.com/forums/en-us/w7itprogeneral/threads

  • Startup error message: error loading of C:\ WINDOWS\azizoqocefuwejat.dll

    Nice day

    I sent my computer to be restored and cleaned of the virus. (Computer HP with Windows XP, Service pack 3)

    Error message appeared after about third computer startup.

    Error loading of C:\ WINDOWS\azizoqocefuwejat.dll

    The specified module could not be found.

    Unplugged the computer and set it aside for a fight a year.

    Not dusted him off and in the hope to use again.

    Removed all kinds of programs (IOBIT, etc.)

    Because the computer was restored, began upgrading computer from Windows Update Update Manager

    then installed the Norton 360, 30 trial days

    analyses complete completed camps, who has not identified problems

    Disk Cleanup

    Registry cleaning

    Googled the dll and nothing at all is listed

    What is this error message?

    How can I get rid of this error message?

    I have several computers and my cell phones set up shared radio router, do I need to worry about cross-contamination?

    Thanks in advance for your time and your consideration.

    Additional thoughts:

    It is sometimes easy to get rid of the error message by doing something like disable the startup item in msconfig (if you can still find), but I suggest you actually solve the problem and difficulty not only the symptom of the problem by simply deleting the startup message.
    I would also not recommend you start digging in the registry to try to find the startup item and remove it unless you have a backup of your system or at least a backup of your registry, because there is no 'Cancel' or 'quit without saving changes' option in regedit.  If you make a mistake, that's all.
    These ideas relieve 'rapid' and sometimes risky of the symptom if they not even work at all, but they can't actually solve the problem.  Also, I'd be suspicious of ideas that begin with the words "try."  You don't need to try things, you need to fix things.  You don't need to try ideas that might work, you must do something that will always work all the time.
    Here are the detailed instructions that protect you and solve your problem in the 'right' way.
    There is very little. DLL files that should be loaded from the C:\WINDOWS folder and is not one of them.  If you do not have a good explanation for the name of the file in a Google search, the chances are good that your system is currently or has been infected by malware.

    A "Cannot find...". ', ' Failed to start..., "Could not load..." ». "Might not work... "" Cannot run ""error loading... ". "or"specific module could not be found"message at startup is usually related to the malware that has been configured to run at startup, but the referenced file has been removed after a malware scan, leaving behind him a startup item or the registry entry pointing to a file that does not exist.
    It might be a removal of malicious software or an application not installed.  The entry may have a curious looking name since it was probably generated at random when the malware was installed. If you search your system for the referenced file, you may not find.
    Windows attempts to load this file but cannot locate because the file has been deleted for most probably during an analysis of the malware. However, an orphaned associate of remainders of startup parameter or registry entry and tells Windows to load the file when you start or connection.
    So you should delete the referenced entry Windows stop trying to load or run the file. It may or may not be included in the registry, but you can find it.  Autoruns (see below) you get the elements no matter where it is.

    You must be sure to solve the problem and not just fix the symptom of the problem by simply relieving your message - system is not a fix (there is a difference).

    If you just locate and uncheck the item in msconfig, which disables the element but does not remove the reference to the element of false starting your computer.   The msconfig program is not a Startup Manager, that's a troubleshooting tool.  Disabling things in msconfig to put an end to the messages and think that your problem is solved is short-sighted and leave behind him a sloppy XP configuration.  Just disable the display of a start-up error message should not count as a 'solution' to the problem.
    If you are comfortable editing the registry, you can find and remove the reference directly from there or remove it using a popular third-party tool called Autoruns.  The problem can always be found in the registry well.
    Before making any changes to your registry by hand or with third-party tools, don't forget to first make a backup of the registry
    . There is no cancellation or exit without saving the option in regedit.
    Here is a link to a popular registry backup tool:
    You can also use the Autoruns to find the element of start remains little matter where he's hiding.  Autoruns does not install anything on your computer.  It will display all startup locations where the reference may be then you can turn it off or remove it completely.  Here is the download link for Autoruns:
    Run Autoruns.exe and wait that he at the end of the filling of the list of entries.
    When the Autoruns is finished scanning your system, it will say "Ready" in the lower left corner.  Autoruns can be a little intimidating to first if you have never seen it before because it displays a lot of information.  You are really interested only a few sections.
    The problem is usually to start the system or the user startup entries, then click the connection tab and see if the startup item is there.
    Scroll through the list and look for a boot entry associated files in the error message.
    If you can't find on the connection tab, look in any tab.
    You can also click file, search to search for logon, or any tab for all or part of the name of the element.
    Right-click on the offending entry and choose Remove.  If you are not sure what it is, you can simply turn off (uncheck the entry), reboot, and if the problem is resolved and things work normally and everything works fine, then delete the offending entry.  If you don't see it in Autoruns, you may edit the registry and remove the item from your startup folder it.  Autoruns shall display the same information however.
    Given that your system has or has had an infection, follow up with this:
    Perform scans for malware, and then fix any problems:

    No matter what you use for malware protection, follow these steps:

    Download, install, update, and make at least an analysis full (not at the same time) with these free malware detection programs:
    SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

    These comprehensive analyses can take some time, but you really need to run.  SAS will probably be just a bunch of Internet tracking cookies, but you can remove them.  Once you have done at least a full analysis, you can do quick scans in the future to save time and save the analyses complete for when you have more time or are really suspicious of an infection of the system.

    They can be uninstalled later if you wish.

    In 1985, there were 11 known computer viruses.  Today, there is more to 1, 122, 311 and the new threats are detected every day.  Always update your virus definitions before running a scan.

    Restart your computer and solve the outstanding issues.
  • error message "Missing Argument" at startup of Win 7

    This appears at the beginning upward with box click OK. Everything seems to work, but this error concerns me.

    Hello

    Once you are sure you are clean and that you have completed the cleaning listed above:

    To remove the error message - its probably requested in your startup group.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or
    Windows 7
    http://support.Microsoft.com/kb/929135

    How to change, add or remove startup programs in Windows 7
    http://www.SevenForums.com/tutorials/1401-startup-programs-change.html

    Autoruns - free - see what programs are configured so that it starts automatically when your
    system boots and you log in. Autoruns is also the full list of registry and files
    locations where applications can configure start automatic settings.
    http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

  • Thunderbird COMPLAINT: Using [back |] Forward] buttons, loses "Privacy, Options button. Exit/Startup [restart] Thunderbird needed to restore the Options button.

    Thunderbird 31.7.0 (and before) COMPLAINT: using [back |] Forward] buttons, loses "In order to protect your privacy, Thunderbird has blocked a remote content in this message." Options button. Exit/Startup [restart] Thunderbird is require to retrieve the button 'Options '. Is there another way, without rebooting? [There is no help / Feedback in Thunderbird button... so I'm reporting it via Firefox.]

    Check if this being due to any any addon.

    Restart Thunderbird in Mode safe:
    Help > restart with disabled addons.
    Whist in safe mode, run for a while to see if that happens.

    If it does not work then one of your addons can cause a conflict.
    Disable each in turn to test.
    She might need to update.

  • I get a "Download complete" message... the options are to install or install later. I didn't download anything. I can't ge rid of the message

    I ran Malwarebytes and Kaspersky. Each finds a few threats that have been quarantined or deleted. They do not fix/delete the message.

    In addition, the startup is very slow... don't know if this is an indication of a virus or simply an old computer (Toshiba Satellite 2006, dual processor) with the challenges of protection against most current software/viruses etc.

    Hello, could go you firefox > help > troubleshooting information, copy the contents of this page and paste them here in an answer on the forum? This could give us an idea of what's going on...

  • Message: application launcher - cannot load configuration

    Hello
    Whenever I start my laptop, that a message is displayed on the desktop. APPLICATION LAUNCHER: could not load the configuration. Could someone tell me what this means and how can I sort or get rid of it please?

    Thank you.

    I have never seen anything like it. Can you please give us more information?
    Which laptop model you have?
    What operating system is pre-installed it?
    Can you identify which application are part of this error message?
    Check the list of startup and try disabling unnecessary applications using. Sorry, but reading the description of your problem there is no useful information, and it is not easy to say anything.

  • Crash on startup Satellite L500-128

    Hello

    Sometimes, when I start my Satellite L500, I experience a blue screen that says that the laptop restarts automatically to avoid damaging the material.

    It's coming fast, so I can't read all the text in the message. After auto restarts, the startup is normal.

    Problem solver of Windows gives me an indication regarding these files.

    060210-18657 - 01.dmp
    SysData. XML
    WERInternalMetadata.xml

    That this has something to do with a bios update?

    Kind regards

    JW

    Hello

    Usually, you can also check the BSOD code in the Windows Event Viewer but also turn off automatic restart in case of system error.
    If you know the exact code of BSOD, you can search in the Internet and the Knowledge Base Microsoft for detailed explanations.

    These bluescreens means generally that there is a driver or a hardware problem.
    Also the Toshiba Recovery disk can help you identify the exact problem.

  • "FIRE WALL in" ERROR at STARTUP (but fire wall has never been extinguished)

    "Not on fire wall" (win xp running IE)
    error message appears on the taskbar at startup

    Status of the firewall is set to on if checked & setting is never passed

    usually, leaving computer to boot, the error disappears, but sometimes is not
    fire wall in the course of performance when the problem occurs at startup, message usually disappears,

    Software MS DIFFICULTY HE found nothing (but it was not accurate for other problems in the past, that when solved by changes to the settings)

    the search for answers to the problem that is documented by other users online
    updated suggestions when it has been caused by downloading a Microsoft & there is no problem to know,
    and Microsoft has not addressed the issue.

    ANY SUGGESTIONS?

    Hello

    ·        Remember to make changes to the system?

    ·        Do you have any third-party firewall installed on the system?

    ·        After this message can you turn on the firewall on the system?

    Method 1:

    I suggest you to check in services if the firewall service is disabled. Follow the steps mentioned below.

    a. Click Start and type services.msc in the run box and press ENTER to open the Services window.

    b. Locate the Windows Firewall service in the list and then right-click on it.

    c. click Properties and make the startup type to automatic, and then click on apply, then Ok.

    Restart the system and check if the problem is resolved.

    Method 2:

    I suggest you to check if the firewall is enabled on the system or not. Follow the steps mentioned below.

    a. Click Start, and click Control Panel.

    b. click Security Center, and then check if the firewall is enabled.

    I suggest you to return the items mentioned below.

    How can I turn on or turn off the firewall in Windows XP Service Pack 2 or later versions?

    http://support.Microsoft.com/kb/283673

    Troubleshooting settings of Windows Firewall in Windows XP Service Pack 2 for advanced users

    http://support.Microsoft.com/kb/875357

    Thanks and regards.

    Thahaseena M
    Microsoft Answers Support Engineer.
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Start message

    The message that is displayed is C:\Users\Judilee\\App

    data\Local\Temp\IXPO10TMP\IE-REDIST. EXE is not an application valid Win 32 - what I have to do?

    Hello

    Good luck which is malware then please do a thorough check. Following message will show how
    delete a startup message.

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the
    cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    TDSSKiller.exe. - Download the desktop - so go ahead and right-click on it - RUN AS ADMIN
    It will display all the infections in the report after you run - if it will not run changed the name of
    TDSSKiller.exe to tdsskiller.com. If she finds something or not does not mean that you should not
    check with the other methods below.
    http://support.Kaspersky.com/viruses/solutions?QID=208280684

    Download malwarebytes and scan with it, run MRT and use scanners online and other methods.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/products/malwarebytes_free

    SuperAntiSpyware Portable Scanner - free
    http://www.SUPERAntiSpyware.com/portablescanner.HTML?tag=SAS_HOMEPAGE

    AdwCleaner
    http://www.bleepingcomputer.com/download/adwcleaner/
    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    Microsoft safety scanner
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Scan online ESET
    http://www.eset.com/onlinescan/

    Scan Kaspersky online
    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing system
    files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
    RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK your way out then
    turn it back on.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    =======================================

    For extreme cases:

    What is Windows Defender in offline mode?
    http://Windows.Microsoft.com/en-us/Windows/what-is-Windows-Defender-offline

    System requirements Windows Defender in offline mode
    http://Windows.Microsoft.com/en-us/Windows/Windows-Defender-offline-system-requirements

    Norton Power Eraser - eliminates deeply embedded and difficult to remove crimeware
    This traditional antivirus analysis does not always detect. Because the Norton Power Eraser
    uses aggressive methods to detect these threats, there is a risk that it can select some
    legitimate programs for removal. You should use this tool very carefully and only after
    you have exhausted other options.
    http://us.Norton.com/support/DIY/index.jsp

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" experience :="" bicycle="" -="" mark="" twain="" said="" it="">

Maybe you are looking for

  • Episode is online in Podcast App but not ranked in iTunes

    Hello everyone and thank you for reading this. I saw him quite often memory problems and eposides people not apprearing. everything for a reason of course. My Podcast is online, episodes enter iTunes quickly and are listed in the application of podca

  • Remove Bios password

    I have a model VPC-f1190x what Bios FRIEND R0280Y6 2.6. I've put a bios password on it and can not remember for the life of me. I can still use the computer, but I need to get the bios to change some settings and cannot. How can I remove this passwor

  • I put my iPhone date of January 1, 1970. How to remedy

    I saw an ad on Facebook on how to change the icons of the application to the format of the old school. He said changing the date on the 1st Jan, 1970. I did and now my iPhone won't turn on. How can I fix this without having to replace the phone.

  • HP Pavilion 2312 G6 AX RAM upgrade

    I want to add an additional 4 GB RAM module with my existing 4 GB. I called HP support and they said that the product could not be improved beyond 4 GB. I did a search online and found that the product does support up to 8 GB of RAM. How to spend it?

  • If the virtual machine can be harmful?

    VPC may be dangerous for my pc anyway. I have average can do something wrong?