Oftentimes a setting needs to be toggled off and on for Windows to take note of it, so lets try that with the standby issue. Go back to the...
I forgot to mention, the IRW.exe file made reference to the following. c:\bwa\appleremotewin-200.1.1\srcroot\appleremote\release\IRW.pdb...
Glad to help David. You're most welcome! Geri has posted some very helpful information and recommendations regarding future protection in the...
The .DS_Store file is generally associated with a Mac operating system. It's much the same as the desktop.ini file in Windows. Are you connected...
Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as; Filename:...
Yes, UAC will cause that. :)
Refer to post #28 and #30 Fix the entry in post #30 with HijackThis and restart. Did the message go away? If so, you found the culprit. If not,...
Still a bit to do. Download ComboFix by sUBs from here, saving the file to your desktop. Please disable realtime protection applications as...
You need the PID to show in Task Manager. While on the Processes tab, click View>Select Columns Select PID (Process Identifier) then OK
I'm happy to hear ComboFix seems to have resolved the problem, but I feel compelled to warn against running tools such as ComboFix without prior...
Excuse the interruption, please :o Do you have a link to where you downloaded the touchcopy software? Do you still have the installer? If so,...
Hi pbenjamin, What was the outcome of the AV and antispyware scans? Is the computer any better now? Still having problems? If so, please create...
Highlight and copy the contents of the code box below. reg delete "HKLM\SOFTWARE\swearware /f reg delete "HKCU\Software\Wget /f exit cls...
Highlight and copy the contents of the code box below to a blank notepad. Save it to the desktop as; Filename: fix.reg Save as type: All Files...
Delete the following file. C:\WINDOWS\system32\msftpd.dll What is the following tool? WinXP\WXPVOL_EN\Key Hack\keyfinder.exe You've...
Open a command window and type the following command then hit enter. tasklist /svc Now open Task Manager and identify the PID of the svchost...
Based on the time and date on this file, I suspect it might be related to Kaspersky, but I'd like to make sure. Please upload the following file...
I still recommend you post the requested logs. There may be more yet to do.
So, are you saying that you fix those entries with HijackThis and they're back when you scan again?
Hi Bill, Is that machine XP Pro or Home edition?
Separate names with a comma.
