Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

A Virus still messing up my computer


  • Please log in to reply

#31
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
A suggestion from another G2G helper:

In the search box type:

iexplore -extoff

(Space before the -)
when it finds it double click on it. Once IE opens, go to yahoo.com

Does it look any different?
  • 0

Advertisements


#32
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
Oh boy, I am embarrassed!

I opened Yahoo in IE. clicked F12 and the only thing
that came up was a grey bar on the bottom of the page
with file, find, disable, view, images cache, tools, validate
and browser mode. There was nothing on the page.

I also went to Yahoo in IE, went to edit, select all, hit F12
and same thing happened.

I typed iexplore -extoff and the only one I could find in the list
was iexplore.com. I clicked on it and then opened Yahoo from my
favorites list and nothing was different. :blush:
  • 0

#33
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Do the F12 thing again and this time when you get the grey bar with file, find, disable, view, images cache, tools, validate and browser mode, click on Cache. Click on Clear Browser Cache for this Domain. Then click on Images, View Image Report. A new tab will open up next to the Yahoo.com tab (takes a few seconds to come up). If you scroll down it
do you see any pictures? Mine has a bunch of Dilbert cartoons at the bottom.

Make sure you type in yahoo.com each time. There could be something funny with your favorite.


Copy the next line:

"C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF yahoo.com

Then Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter (if IE does not open). This should be the 64 bit version of IE. Does it work?

Now try copying this line:

C:\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE" -EXTOFF yahoo.com

Then Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter (if IE does not open).
  • 0

#34
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
Hi Ron,

Wouldn't you know it. I turned off the power for the night and when I turned it back on my
Yahoo page came up and seems to work fine.

I checked out other pages and now Twitter doesn't work again. I followed the steps above and
using Twitter instead and on the Image Report did see a picture with a view of the city.

Then, I pasted the first line but added Twitter instead of Yahoo. Nothing changed after that. Then I tried the second line,
same thing and I couldn't get it to paste. I was just getting a symbol that looked like a curved V.
I did notice that the last line I copied didn't have a parentheses at the beginning of the sentence. Not sure that
makes a difference. I tried to add it also, but the line still wouldn't paste.

Thanks, Beetrix

Edited by Beetrix, 31 July 2013 - 07:26 AM.

  • 0

#35
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Let's check the disk again:

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check, but don't restart yet.

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application. Reboot. The disk check will run and will probably take an hour or more to finish.


Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after each line).

sfc /scannow

(SPACE after sfc. This will check your critical system files. If it asks for a CD and you don't have one or it doesn't like your CD just tell it to SKIP.)



1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:

2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.

Ron
  • 0

#36
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
Hi Ron,
I followed all instructions.
Here are the print outs for System and Application,

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 01/08/2013 10:00:24 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 01/08/2013 1:41:52 PM
Type: Error Category: 403
Event: 413 Source: Microsoft-Windows-TaskScheduler
Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147549183.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 01/08/2013 4:01:58 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name 6to4.ipv6.microsoft.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 01/08/2013 4:01:51 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 01/08/2013 4:01:38 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name teredo.ipv6.microsoft.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 01/08/2013 1:42:28 PM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name us.data.toolbar.yahoo.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 01/08/2013 11:23:50 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.



Application

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 01/08/2013 10:01:45 AM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 01/08/2013 4:46:31 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 4:46:31 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 4:21:19 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 4:01:23 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 4:01:23 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 3:43:34 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 3:23:40 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 3:23:40 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 3:13:19 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:53:33 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:53:33 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:36:49 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:20:06 PM
Type: Information Category: 0
Event: 8224 Source: VSS
The VSS service is shutting down due to idle timeout.

Log: 'Application' Date/Time: 01/08/2013 2:17:03 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:17:03 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 2:02:34 PM
Type: Information Category: 0
Event: 0 Source: HP Support Assistant Service
PowerEvent handled successfully by the service.

Log: 'Application' Date/Time: 01/08/2013 1:49:22 PM
Type: Information Category: 0
Event: 903 Source: Microsoft-Windows-Security-SPP
The Software Protection service has stopped.

Log: 'Application' Date/Time: 01/08/2013 1:46:19 PM
Type: Information Category: 0
Event: 1000 Source: Microsoft-Windows-LoadPerf
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.

Log: 'Application' Date/Time: 01/08/2013 1:46:19 PM
Type: Information Category: 0
Event: 1001 Source: Microsoft-Windows-LoadPerf
Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

Log: 'Application' Date/Time: 01/08/2013 1:44:22 PM
Type: Information Category: 0
Event: 902 Source: Microsoft-Windows-Security-SPP
The Software Protection service has started. 6.1.7601.17514

Thanks! Beetrix
  • 0

#37
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Let's see if we can figure out what makes this error:

Log: 'System' Date/Time: 01/08/2013 1:41:52 PM
Type: Error Category: 403
Event: 413 Source: Microsoft-Windows-TaskScheduler
Task Scheduler service failed to load tasks at service startup. Additional Data: Error Value: 2147549183.


Open an Elevated Task Scheduler per:
http://bcrawfordjr.w...task-scheduler/

Then In the Actions pane (on the far right), click Enable All Tasks History. Close Task Scheduler. Reboot.

Open an Elevated Task Scheduler per:
http://bcrawfordjr.w...task-scheduler/

Look in Task Status. Do you see one that has failed? What is it?
  • 0

#38
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
When I click on the first link, on the page all I see on the right is a
Search box, Recent Posts, Tags, Calendar, Tools.
  • 0

#39
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Probably best to open the links with Firefox.

If you right click on the link and Copy Link Location then open Firefox and right click on the box where you type in the URL and select Paste & Go it should open the page to:
http://bcrawfordjr.wordpress.com/2009/08/31/opening-windows-7-task-scheduler/
It says (minus the pictures)

Click on the Start Orb button to open the Start Menu. Refer to Image below.


Type the following in the Search programs and files box. Refer to Image below.

Task Scheduler

Right-click Task Scheduler in the Start Menu results to select Run as administrator to open Windows 7 Task Scheduler with elevation. Refer to Image below.


Then In the Actions pane (on the far right), click Enable All Tasks History. Close Task Scheduler. Reboot.


The second link is the same.

Click on the Start Orb button to open the Start Menu. Refer to Image below.


Type the following in the Search programs and files box. Refer to Image below.

Task Scheduler

Right-click Task Scheduler in the Start Menu results to select Run as administrator to open Windows 7 Task Scheduler with elevation. Refer to Image below.


Look in Task Status. Do you see one that has failed? What is it?
  • 0

#40
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
I hope I did this right. It says Reading Data Failed.
  • 0

Advertisements


#41
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Can you take a screen shot of the page?


Bring up the Task Scheduler again

Press the Alt + the Print Screen key on your keyboard. It may be labeled [PrtScn].

Open Microsoft Paint (All Programs, Accessories,Paint).

Go to the Edit menu and choose Paste (or just do Ctrl + v) and the image should appear.


Go to the File Menu and choose Save As.

Navigate to the folder where you want to save the image. (Desktop)

Type a file name for the image: Task

Select a file type. jpeg

Click the Save button.

Attach Task.jpg to your Reply.
  • 0

#42
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
Hi Ron, here it is!

Attached Thumbnails

  • Task.jpg

  • 0

#43
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Now click on Task Scheduler Library and do another screen shot.
  • 0

#44
Beetrix

Beetrix

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 133 posts
I did that!

I just want to tell you that when I open the Task Scheduler a window opens with a red X saying:
The selected task "(0)" no longer exists. To see current tasks, click refresh and OK. I did that and another window
opened that said Task Scheduler Service is not available. Task will attempt to reconnect to it.
Then, the first box opens again repeating the same thing. I click OK and the Task Scheduler remains.

Attached Thumbnails

  • TS Library.jpg

Edited by Beetrix, 02 August 2013 - 02:14 PM.

  • 0

#45
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
I found this on your error. See if it makes any sense to you:

Open Task Scheduler and click OK when prompted with the error. It may seem like you are receiving the same error over and over, but this is really due to the number of tasks which are broken. Make a note of the number of times you are prompted with the the selected task "{0}" error. This is the number of task files that are out of sync with the registry.


Start with the first folder under Windows tasks (Task Scheduler(Local)\Task Scheduler Library\Microsoft\Windows) and select each folder in turn until you receive the the selected task "{0}" error. This folder contains files that are not in sync with the task scheduler.

(A lot of people seem to have problems with defrag which runs at boot so that might be what you have too.)

Open Windows Explorer and navigate to the tasks file folder (%SystemFolder%\Tasks\Microsoft\Windows) and find the folder which corresponds to the folder in which you received the error.
For some tasks you will be able to determine which files need to be deleted by comparing the list in the Task Scheduler with the list of files in Explorer. Some tasks will only have a single file in explorer, or, in one case I had 2 and the first was missing. Once Task Scheduler encounters this error it will no longer display tasks so it makes the job of getting the two in sync a little more difficult. Once you have determined which files exist in the File Folder but do not exist in the Task Scheduler folder, delete those files.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP