Trojan, I recently conducted a scan using avg free and two Trojan horses not healed I did not withdraw.

Hello

the analysis showed 4 paths where the Trojan horse is incorporated.  AVG has eliminated two of them.  Then displays a warning

message moved object is greater than the limit of size of the Archives for two Trojans left and displays the file

path c/swsetup/sp56715/win32/data1.cab.  I have a hp pavilion laptop 1d60us g6 using a 32-bit operating system. I have

chatted with an avg tech who told me that this Trojan horse cannot be deleted with the avg program I have but they can

remove it, but I have to pay for this service.  Anyone know how I can remove it myself?

Hello

Remove the threat won't destroy your operating system and data.

I really don't understand why you choose not to delete the objects of threat.

Quarantine and remove threats are the only way you have unless you pay someone else, a lot of $$ or €€ to remove this or these for you.

Of course there is always the start over with a clean slate and install the software again "antivirus/anti-malware" freebie. That will just start all over again.

Using the ERD will not help. What you do not understand, is that the malware and threats is in the registry.

There is a new stand-alone Microsoft Scanner to remove the viruses, malware, and adware that is supposed to be quite effective. It's certainly worth a try.

Erico-

Tags: Notebooks

Similar Questions

  • How can I clear the attraction of the browser to the bottom of the list, I followed the directions using the options and it will be not only clear

    How can I clear the attraction of the browser to the bottom of the list, I followed the directions using the options and it will be not only clear

    Entries in the location bar drop-down list with a yellow star (blue on Mac) at the right end of the bookmarks.

    You can delete this an item marked with a bookmark that appear in the list, if you open this url in a tab and click on the yellow star in the address bar.

    This will open the "Edit this bookmark" dialog box and you can click on the delete button to delete the bookmark if you want to delete such an entry marked with a bookmark.

  • I recently spent the hard disks, now I can't use windows update, and many things do not work with her telling me that I have a non-genuine version of windows

    Diagnostic report (1.9.0027.0):
    -----------------------------------------
    Validation of Windows data-->

    Validation code: 0x8004FE21
    Code of Validation caching online: 0x0
    Windows product key: *-* - 73CQT - WMF7J-3Q6C9
    Windows product key hash: RmurcM3ZxzWyfEP9WtPUJw = + KaFG
    Windows product ID: 00359-OEM-8992687-00010
    Windows product ID type: 2
    Windows license Type: OEM SLP
    The Windows OS version: 6.1.7600.2.00010300.0.0.003
    ID: {110E5798-547C-4E16-A39A-50DED349C409} (3)
    Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/a, hr = 0 x 80070002
    Signed by: n/a, hr = 0 x 80070002
    Product name: Windows 7 Home Premium
    Architecture: 0 x 00000009
    Build lab: 7600.win7_gdr.120503 - 2030
    TTS error:
    Validation of diagnosis:
    Resolution state: n/a

    Given Vista WgaER-->
    ThreatID (s): n/a, hr = 0 x 80070002
    Version: N/a, hr = 0 x 80070002

    Windows XP Notifications data-->
    Cached result: n/a, hr = 0 x 80070002
    File: No.
    Version: N/a, hr = 0 x 80070002
    WgaTray.exe signed by: n/a, hr = 0 x 80070002
    WgaLogon.dll signed by: n/a, hr = 0 x 80070002

    OGA Notifications data-->
    Cached result: n/a, hr = 0 x 80070002
    Version: N/a, hr = 0 x 80070002
    OGAExec.exe signed by: n/a, hr = 0 x 80070002
    OGAAddin.dll signed by: n/a, hr = 0 x 80070002

    OGA data-->
    Office status: 100 authentic
    Microsoft Office Home and Student 2007-100 authentic
    OGA Version: N/a, 0 x 80070002
    Signed by: n/a, hr = 0 x 80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Data browser-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default browser: C:\Program Files (x 86) \Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: fast
    Download unsigned ActiveX controls: disabled
    Run ActiveX controls and plug-ins: allowed
    Initialize and script ActiveX controls not marked as safe: disabled
    Allow the Internet Explorer Webbrowser control scripts: disabled
    Active scripting: allowed
    Recognized ActiveX controls safe for scripting: allowed

    Analysis of file data-->
    [File mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\sppobjs.dll[6.1.7600.16385], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\sppc.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\sppwinob.dll[6.1.7600.16385], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\slui.exe[6.1.7600.16385], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\sppsvc.exe[6.1.7600.16385], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0 x 80092003
    [File mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
    [File mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

    Other data-->
    Office details: {110E5798-547C-4E16-A39A-50DED349C409}1.9.0027.06.1.7600.2.00010300.0.0.003x 64*-*-*-*-3Q6C900359-OEM-8992687-000102S-1-5-21-1802398032-3129996896-1938211476Hewlett-PackardHP G62 Notebook PCHewlett-PackardF.1520100426000000.000000 + 00017B93607018400F804090409Time(GMT-05:00) Standard is03HPQOEMSLIC-MPC100100Microsoft Office home and Student 20071244C54B27D4EF38DlJnqGC9Fs8MocD6cCMmFytChMs = 5160342-81602-924-68546 1

    Content Spsys.log: 0 x 80070002

    License data-->
    The software licensing service version: 6.1.7600.16385

    Name: Windows 7 HomePremium edition
    Description: operating system Windows - Windows (r) 7, channel OEM_SLP
    Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
    ID of the application: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00359-00178-926-800010-02-1033-7600.0000-1172010
    Installation ID: 016205689981921686173085639011241993609851718900326893
    Processor certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
    The machine certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
    Use license URL: http://go.microsoft.com/fwlink/?LinkID=88341
    Product key certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
    Partial product key: 3Q6C9
    License status: licensed
    Remaining Windows rearm count: 1
    Trust time: 09/11/2012 10:47:30

    Windows Activation Technologies-->
    HrOffline: 0x8004FE21
    HrOnline: n/a
    Beyond: 0x000000000001EFF0
    Event timestamp: 11:9:2012 05:31
    ActiveX: Registered, Version: 7.1.7600.16395
    The admin service: recorded, Version: 7.1.7600.16395
    Output beyond bitmask:
    Altered the file: %systemroot%\system32\sppobjs.dll
    Altered the file: %systemroot%\system32\sppc.dll|sppc.dll.mui
    Altered the file: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
    Altered the file: %systemroot%\system32\sppwinob.dll
    Altered the file: %systemroot%\system32\slc.dll|slc.dll.mui
    Altered the file: %systemroot%\system32\slcext.dll|slcext.dll.mui
    Altered the file: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
    Tampered files: Check %systemroot%\system32\slui.exe|slui.exe.mui|COM
    Altered the file: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
    Altered the file: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
    Altered the file: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
    Altered the file: %systemroot%\system32\drivers\spsys.sys

    --> HWID data
    Current Hash HWID: LgAAAAEAAQABAAIAAAABAAAAAgABAAEAeqh2tCiMSnBKUf5xvPZkLKSv8k9Gyg ==

    Activation 1.0 data OEM-->
    N/A

    Activation 2.0 data OEM-->
    BIOS valid for OA 2.0: Yes
    Windows marker version: 0 x 20001
    OEMID and OEMTableID consistent: Yes
    BIOS information:
    ACPI Table name OEMID value OEMTableID value
    HPQOEM APIC-SLIC-MPC
    HPQOEM FACP SLIC-MPC
    HPQOEM HPET SLIC-MPC
    START HPQOEM SLIC-MPC
    MCFG HPQOEM SLIC-MPC
    ASF!            HPQOEM SLIC-MPC
    SLIC SLIC-MPC HPQOEM
    SSDT PmRef CpuPm

    This may simply be caused by a bad set of drivers of technology Intel Rapid Storage Technology-

    Intel rapid storage driver installation

    try to download and install them from here - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=21730

    (you want the download of iata_enu.exe)

    Once complete, please restart twice, then after another MGADiag report.

  • error on execution of fpclose.vi when you use FP-1000 and two FP-TC-120 module

    I have an error that occur in my LabVIEW program by closing connections Point field.

    I use LV8.5 and im to connect to a FP-1000 (native RS-232 port) controller that connects to two modules FP-TC-120, under XP.

    The error I get is "error 33589' caused by 'FPClose.vi', is actually the second"FPClose.vi"that produced the error, as shown in the picture by the giant arrow. Strangely, there does appear to be an effect of the program and it runs and disconnects as should be, its mostly just bugging me.

    I can't find this error listed anywhere, I can't find a nice long list of errors.

    I have an insidious sense that when I close the FP read labels with the FPClose.VI I am actually closing connection to the PS module and therefore do not close the system as intended.

    I would be grateful is someone would instruct me as to the cause of the error, and what I should do to properly close the FP module.

    Well, I managed to get to the bottom of the problem, it was not caused by FPClose!

    Errors where of course be cascaded through FPClose and then the 'error' said that the source was the second "FP Close.vi" he did the second "PS Read.vi". The fact that the IAK was in a loop was not the cause of my problem, but it's a clear sign of poor programming!

    Error reading FieldPoint 33589 actually is that some channels are determined to be OpenLoop. In my case I had all the channels of the first bank connected to the K-Type thermocouples, but only 2 channels of the second Bank connection and so the error were raised in the second "read FP' and cascading to the second"FP close. " To consider an error is actually a misnomer because it is actually a warning and has no influence on the conduct of the program.

    I think that the original example I posted was written for LV 6.1 and FP 3.x. I updated my own example to update methods used in LV 2011 and FP 6.0.9, they run a lot smoother than the previous method. I hope this might help someone else in the future.

  • I use Windows 7 and my pc does not recognize my wireless Photosmart HP 5510 printer

    It will print but after not using it for awhile, when I try to print, I get the message that my computer can not find printed

    First thing I would try is restart your wireless router and if this does not work, it give a try.

    HP Print doctor for help with many printing problems

    http://h10025.www1.HP.com/ewfrf/wc/document?cc=us&LC=en&docName=c02073861&JumpID=ex_r4155/HHO/IPG/ccdoc/trailhead_doc&lang=en

    I hope this helps.

  • Error - installation failed when trying to open AVG Antivirus and internet options will not open.

    Original title: I need help to fix my 'internet options' in the control panel.

    THiiS is a recent problem and I don't know what may have caused it. I tried to install a new virus program to see if the problem was a virus or spyware. I have read that sometimes AVG will cause problems. But in order to install the new antivirus, I have to remove AVG... cannot do! It says "installation failed" when I try to open the long counter. There is therefore no uninstall program. I need to open my internet options in the control panel to start the process of fixing things. but it does not open. I can't download all the programs from my browser. In the lower right hand corner of my IE on the left 'internet' is a white box with a red X.

    UPDATE... I used my external CD/dvd drive and was able to copy the installation for firefox to a computer and put it on the shot, I have problems with. Hooray! success... Now, I have firefox and a navigation bar and was able to successfully download a program from the internet. Now, try to uninstall AVG... (how the hell uninstall something that says 'installation failed')

    Hi patriciashifflett,

    What version of Internet Explorer you have on your computer?

    Due to Internet Explorer, you can follow this link & check if the problem persists.

    Internet Explorer does not start or stops responding

    To remove AVG Anti-virus, you can download and run AVG remover which eliminate all parts of your installation of AVG on your computer, including the registry, system files, user files, etc.

    http://www.Avg.com/us-en/download-tools

    You can also download & install Microsoft Security Essentials on your machine.

    Hope the helps of information.
    Please post back and we do know.

  • My Norton anti-virus software used to work and now it does not work with the new Firefox update. This corrected soon? Otherwise, I will not use the product

    Since your last update that my Norton toolbar will not work... If it does not work, will not use your product. Can it be fixed quickly?

    According to the article, I linked to before, you will need to update the norton version 2015.2.1.13 toolbar that is compatible.

  • I recently installed plugins of brush (fire, stars and glitter) I was not able to change the color of the brush since. Anyone has any advice on how to remedy this situation?

    Any help appreciated, dunce full here.

    Sorting, I put a pallet of each color in a library and used it works a treat!

  • Using the free account but pro option not available for upgrade only multi-user

    Why am I not given the possibility to opt for a free account multi-user account? I want to upgrade to Pro's Free. I did this 2 - 3 times before in recent years. Anyone seen this before? I have attempted to remedy this by online chat with no help given and my support ticket has been underway for a few days now.

    Thanks, for the reply. EchoSign support responded twice to me this morning which was a pleasant surprise. They had to make a change to my user name that allowed me to access the Pro upgrade page. I don't know what the problem was, but they fixed. Everything is good now. It comes to the screen, that I was taken in when I clicked on the link to upgrade you mentioned.

  • I use hp eprint and that you can not set the e-mail account. Should what settings I use for the Description, host name, Port and use SSL?

    I downloaded hp eprint app and you cannot configure e-mail account

    I suggest you ask on a forum of HP. It's nothing to do with Thunderbird, as the eprint software connects directly to your email provider that I see.

    Maybe this will help http://h30434.www3.hp.com/t5/ePrint-Print-Apps-Mobile-Printing-and-ePrintCenter/Cant-find-my-computer-eprint-email-address/td-p/680697.

  • I built a site using the free trial version. Why not open the site with the purchased application?

    This weekend I downloaded the free trial version of Muse on my laptop (PC), has done several tutorials and a LOT of work done on the site. When I tried to open the file this morning on my desktop (PC) - which integrates the latest version of Muse installed CC - I get the error message "this file Adobe Muse of the site requires a newer version of Adobe Muse. Please upgrade to the latest version. "What should I do now? I read everything I can find and I'm stumped. I really need to get this site opened today.

    Help! Thank you!

    Unfortunately no, we cannot save a file in a low version.

    Thank you

    Sanjit

  • LR 4.4.1 crashing on iMac osx 10.8.5 when you use the exposure and shadows. Does not restart with about reset surge protector. Worked perfectly for 1.5 years of upgrades to 4.4

    Hello

    Thanks for any help you may have. 4.4 LR worked perfectly on iMac 27' OSX 10.8.5 for 1.5 years until October this year when close downs began before making the adjustment on mainly the exposure sliders and shadow. Unit will not re-start less wait reboot power surge will become after 10-15 minutes. Apple replaced the card main and erased the disc. Backup LR 4 recharged and upgrade 4.4.1. New protection against overvoltages or directly in decision-making makes no difference and stop occurs immediately after moving the cursor. An old man can make suggestions or auto checks? This is the teacher/student version.

    Thank you dj. I'm going back to Apple and let him until he succeeds (the sixth time, as its under warranty) any other suggestions anyone?

  • does anyone know how I can uninstall AVG free 9.0 antivirus program. I get this error message, why tryig to uninstall - @FinalDlg_default_logfile_name

    I installed a trial of avg vertion, seeing that I have only 22 days of free trial, I changed my mind. In addition, my computer began to close and restart continuously, so I used system restore to go back to before the installation of this particular avg, but I used avg free 9.o. After the system restore, my computer is more closed suddengly & restart again but now I want to uninstall avg free 9.0 because it's showing out n the Security Center and I can't turn it back on t. In the judgment, it does not work so I decided to take down a new free version of avg, but to try to install it, I get this error message - @FinalDlg_default_logfile_name

    Hello

    the link below is the AVG removal tool (top of the list)

    Choose the version of right trepanning to your machine

    http://www.Avg.com/us-en/utilities

  • I can't open exe including my antivirus AVG files and exe Skype files

    My computer is a HP Pavilion dv7-1133d laptop with 64-bit of Windows Vista software.  Access to Internet is correct.  Cannot open any exe files included patches recommended for this problem.

    Hi CarolWorthington,

    1 have. what difficulties you tried to solve the problem?

    2. you receive messages or error codes?

    3. when the problem started?

    4. you remember to make changes to the computer before this problem?

    Step 1:

    You can try to run a SFC scan and check.

    This problem may occur if a system file is missing or damaged.

    You can refer to the method-the System File Checker tool in the following article:

    How to use the System File Checker tool to fix the system files missing or corrupted on Windows Vista or Windows 7

    http://support.Microsoft.com/kb/929833

    Step 2:

    You can also check the following link and try to download the Microsoft Safety Scanner and perform a full scan on your computer and check.

    Note: When you perform the analysis, there are risks of data loss you can take a backup of important data before performing analysis.

    Check out the link:

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Hope this information is useful.

  • I have a Trojan horse in my computer. I have windows xp. I ran avg, but it can't get out the Trojan horse. the computer is very slow and I'm not able to use ctrl + alt + del, or recovery system. If I uninstall windows and install it and then return. who w

    I also get messages saying: my computer is infected by trojan and I should update my spyware... but I think that the message box may come the virus itself...

    Karina...

    It would probably be best for you to use the free services of a reputable online organization that specializes in the removal of malicious virus/trojan/software.  There are now available on the internet.

    Such a forum is hosted by Safer Networking Ltd., authors of the popular software 'Spybot S & D'...

    http://forums.Spybot.info/forumdisplay.php?f=22

    You may want to consider giving them a try, BUT... do not forget to try to comply with their preliminary instructions before asking for help.

    Good luck

Maybe you are looking for

  • Tecra R850-147 - custom Flash work tool cards

    Hello I just downloaded new Windows 8 Professional 64 bit - English on MSDNA.I downloaded the drivers called Windows 8 - upgrade of official Toshiba site My question is. Why when im pressing 'fn' I can't see my screen tabs on top. Also I can not turn

  • How can I make IDE to AHCI in windows 8

    I need to convert IDE to AHCI and how do I do this? IM using SATA 2.0

  • Fscommand

    I used adobe flash to make an autorun which is a list of some games, I have used fscommand in my flash file to load an executable file external when the button is pressed, but as I have 5 program to open multiple windows to different buttons are open

  • I want to cancel the export to Adobe PDF format

    I want to cancel your subscription to Adobe export in PDF format

  • Statement of resources

    Hi, could someone explain how to calculate the cluster resources.I have in total 3 ESXi hosts in the cluster.1 ESXi 4.1 with 32 GB and 8 x 2,493 processors2 ESXi 4.1 with 32 GB and 8 x 2,493 processors3 ESXi 4.1 with 48 GB and 8 x 2.26 processorsRAM