aghoffmann

I have a number of issues that have recently cropped up with my PC. Most seem to be associated with when Outlook started acting up. When I click to open Outlook it will more times than not display the splash screen, then start to open. The main screen opens and tool bars will open, and usually the Folder List will open, but the email window remains blank and Outlook locks up. I will leave the machine and come back in an hour or so and the hour glass is still there and the program is still locked up. I then open task manager and shut it down. The next time it opens it gives the option to

Hitting the delete button worked like a charm. Certainly easier than tracking down and editing some mystery file. It's one of those slap on the forehead "Why didn't I try that in the first place" kind of solution!! Duh! Thanks!

Many of the sites I visit on the internet require a log-in Username and password, and lots of sites require additional form fields to be filled in. When I log on to these site and click in a form field I usually get a drop down list of things I have entered in that field in the past. As time goes by the list gets longer primarily because of my bad typing. Is there a way to edit these entries? I suspect that there is a file that the browser uses to store these... and likely cookies may be involved. How can I go about editing the bad entries in these files?

I periodically get a flurry of "Mail Delivery System" errors. I just sat down and checked my email after checking it only about 3 hours ago and had over 60 emails with some variation of the Returned mail / failure notice / Undeliverable mail / etc. This has occurred to me several times in the past. It seems I'll get a series of these, then nothing for a few months. When I look at the emails it appears that emails were sent using my email address. In other words it appears that my email was "hijacked". The returned "Mail Delivery System" emails appear to be from all over the world. I sent

Hi Chuck, Thanks for the fast response. I'm glad the log looks clean. How do I confirm the restrictions you suggest below? Thanks, Andy

I checked my email this morning and had over 600 "Mail Delivery System" type error messages. I've checked through the day and I'm still receiving them. The "From" and "Subject" lines vary in wording, but all indicate the a mail server somewhere is rejecting mail sent from me. Could I have some sort of Malware that is sending SPAM or worse from my machine. I have an up-to-date version of AVG 7.5 running on my machine and I also ran it this morning after I detected the problem. It only found a few tracking cookies. Here's the HijackThis log: Logfile of Trend Micro HijackThis v2.0.2 Scan sav

I have a Sapphire Radeon 9600SE Edition 128MB graphics card running dual monitors. The two monitors are an old 17" Sony Trinitron and a Nokis 447L. The Sony monitor is dying (yellow color and cuts out frequently). I'd like to replace the Sony with a 20" flatscreen LCD monitor. All the flat screens I've looked at use a resolution of 1680x1050 (which I think it the HxW ratio of HDTV). The Sapphire card doesn't support the 1680x1050 resolution. Is there a driver update that would help, or am I destined to get a new graphics card too?

Therock, Thanks for your help and recommendations. I will implement the recommendations ASAP Everythimg is working well now, no more Photoshop take overs... Have a great 2007... you guys ar true cyber heroes Andy

Attached is a new Hijackthis log Hmmm... attachment didn't seem to work, so I've cut and pasted it below Thanks a lot ~~~~~~~~~~~~~~~~~~~~~~~~~ Logfile of HijackThis v1.99.1 Scan saved at 9:26:27 AM, on 1/3/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\

Hi, The ATF and Panda scans have been completed. Attached is the Panda active scan... seems attaching the file is more space efficient than cut and pasting Thanks, Andy Activescan_01_02_07.txt

It looks like part of the AVG log was cut off so I'm attaching the text log Thanks, Andy Report_Scan_20070102_131132.txt

Here is the new AVG log Thanks ~~~~~~~~~~~~~~~~~~~~~~~~ --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 1:11:32 PM 1/2/2007 + Scan result: C:\Documents and Settings\aghoffmann\My Documents\WorkNetworkFiles\ANewSwitch\CopyOfMyDocs\desktop\holdfile\site managers\CrystalSiteUpdater\csu100.exe -> Backdoor.NetSpy : Cleaned. C:\Documents and Settings\aghoffmann\My Documents\WorkOldP100\desktop\holdfile\site managers\CrystalSiteUpdater\csu100.exe -> Backdoor.NetSpy : Cleaned. :moz

A few weeks ago I noticed that Photoshop (7.0) was open when I sat down at my computer. I figured that my daughter was using it and just left it open. Then last week it opened on its own while I was working. Since then it has been happening more frequently... In fact, it has opened and reopened about ten times while I have been writing this short description... Any ideas? It's getting really frustrating as you might imagine!! Thanks, Andy Attached is a recent (just now) Hijackthis log ~~~~~~~~~~~~~~~~~~~~~~~~~~ Logfile of HijackThis v1.99.1 Scan saved at 5:17:46 PM, on 1/1/2007 Plat

Hi Terrorist 75, Before I change things in the start up files I have a few questions: • Is Mike Lin’s program what I should be using to disable programs? • If I change something that I later want to have back, how do I do that? • Since the last list I sent you I’ve added a few programs. Below is a list of the new entries listed in Mike Lin’s Startup Also, any ideas on the yellow form fields described in my last post? Thanks, Andy _______________________________________ Here are the NEW files listed in Mike Lin’s Start up since installing the new Norton AV, the various program

Hi Terrorist 75, I have finally followed up on your suggestion to get checked at the Malware Forum. I have gone through their recommendations and now have a clean bill of health. Here's the link to that topic: http://www.besttechie.net/forums/index.php?showtopic=9364 You mentioned that you thought some of the programs in my startup may be questionable. I'd like to follow up on that. Do you need a new list of startup programs? Also, another issue that I have noticed lately that makes me suspect something is amiss is that in web pages that have forms some of the form fields now have a yellow

Hi Steamhead, Thanks for the fast reply. I ran thte ATF cleaner and the Panda scan was clean. I've added the new HJT log below. Any ideas on the yellow backgrounds on the form fields that I described in my initial post, or is that a question for another forum? Thanks, Andy _________________________ HijackThis log Logfile of HijackThis v1.99.1 Scan saved at 2:24:04 PM, on 7/31/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\

Greetings, I contacted the PC Support forum to help in figuring out a startup problem I was having. “TheTerrorist 75†was able to help fix the start-up issue, but he noticed some suspicious programs and suggested I work with the Malware forum to clean up things. Here is the linkt to the PC Topic discussion: http://www.besttechie.net/forums/index.php?showtopic=9150 Another issue that I have noticed lately that makes me suspect some sort of Malware is that in web pages that have forms some of the form fields have a yellow background. I notice this both on pages I visit on the web, as well

Matt, Things are looking good. The computer is working better than it has in a long time. It was litterally unusable when I finally discovered Besttechie.net. I was ready to format C and start over. It has truly been a pleasure working with you on this. I'm impressed with your fast responses, patience with all my questions and thoroughness in getting the job done. I have also learned a great deal from working with you. You guys are truly the Super Heroes of Cyber Space, and the evils you fight are every bit as nasty as any conjured up by Hollywood... except the jerks you deal with are rea

Hi Matt, Thanks for all your help; thing are going much smoother. As I continue to update and clean up I’m coming up with a few more questions. • I have updated Windows and activated Automatic Updates. Seems every time I reboot there are a few more updates. I figure that is because some updates are dependent on earlier updates being completed. • I was gong through Add/Remove Programs deleting old unused programs and discovered that SysProtect 1.3.148.0 is still listed. There is also a listing for SysProtect in the START>Programs menu. In the Start>Programs>SysProtect subm

Hi Matt, We’re still chipping away!! A few observations • At your suggestion I went to remove Avenger. I deleted the downloaded .zip file, however when I went to Add/Remove programs I could not find an entry for “Avengerâ€. Is there a special uninstall program somewhere? • A couple other cleanup programs to add to the list of programs I listed in my posting yesterday. I downloaded the limited version of “Avastâ€; there is a Home version too, which I didn’t use. I also downloaded several Iomatic programs: System Medic, Registry Medic and Ram Medic. How do these fit into the m

Matt, YAHOO!! We’re making progress now! Observations: • CWShredder opened fine and the update said we were running the most current version • Had trouble opening in Safe Mode. At one point something about a file ccapp.? flashed by, any ideas • Never got a “real†Safe mode screen, just a black screen with “Safe Mode†written in each corner. I finally ran CWShreadder as a “New Application†from Task Manager which did come up in the black SafeMode screen… • CWshredder found no problems, so I didn’t have anything to agree with. • I ran HJT to check the appropriate it

Terrorist 75, The quote form XPSP2 STOP DEVICE described my problem to a T. I went into Add/Remove programs and deleted the driver and rebooted. That stoped the notice from coming up and the card readers still work fine. I also noticed that GNRICXPK is no longer in my StartUp list The USB2.0CardReader CF RW USB Device, and Combo USB Device are listed in the Device Manager, but I did NOT remove them yet. Do I still need to do that, or am I good since the notice is gone and the readers still work? I use the readers a lot... I'm into digital photography so I use them almost daily and do I d

Matt, Here are the latest Panda Scan and HJT logs It seems like we are making progress until I open Internet Explorer, then all the nasties start hammering away. I even saw a few new ones this time: “Vertical Response†and “The Shield Pro 2006†along with the standard WinAntiVirusPro, SysProtect and Trojan.Awax. Here are my observations on this round: • The nasty dlls, opppp and tuspp, seen impervious to all our efforts • I notice that the CPU usage (as viewed through Task Manager, Performance tab) is ALWAYS at 100% even when I have no applications open… winlogon.exe seems to a

The Terrorist 75 and Liz, Thanks for the info on figuring our start up Start up files. I downloaded MikeLins Startup Control Panel and have been learning a lot. • Many of the entries are pretty obvious by the file name. • There are several that I could probably do without because I don’t use the programs much if at all. (ie Nero, iTunes, maybe the Adobe Gamma Loader) o What are the benefits of “unchecking†these entries? o Do they move to the Deleted list? o Can they be restored?• There is one that I can’t figure out in the “HKLM / Run†tab: GNRICXPK… any ideas? •

Hi Matt, That was sure a fast turn around at your end. Thanks. Things are much slower at my end still. Seems like after the ATF scan things really slowed down. Her are my observation and notes: • The HJT “Fix†went smoothly. After the fix I got 8 “CounterSpy†notices saying that something was fooling around with IE. I allowed it.• Killbox went well too, and yes I did get the message “Pending File Rename Operations…Registery Data has been Removed by External Processâ€.• I had to restart it manually afterwards• I initially tried downloading ATF with an IE browser, but it