MoneySavingExpert.com
Welcome to MoneySavingExpert.com's Forums!
THE EASY WAY: All the Forum's best tips go in MoneySavingExpert's weekly E-mail
Plus you'll get all the new guides, deals and loopholes. It's free & spam free
IMPORTANT! This forum isn't moderated.
If you spot a spam, illegal, offensive, racist, libellous post or PM please email abuse@moneysavingexpert.com
  Remember, this is an open forum! Anyone can post so always exercise caution when acting on info.
  Don't post links for personal gain. Except in the referrers section and always declare any interest.
start The Techie Resource Bar
MoneySaving Articles: Kit Out Your PC For Free | Free Office Software | Phishing Get Updates On Important Changes: Free Weekly Money Tip
You must Register to post (don't worry it's free)
Reply
Page 1 of 2 1 2
Views: 654  
Thread Tools Search this Thread Display Modes
Old 24-11-2009, 8:27 PM   #1
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Unhappy hijack this log from new Asus
cant believe i'm having to post one of these up so soon. :rolleyes:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:23:08, on 24/11/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\VIA\VIAudioi\VDeck\VDECK.EXE
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMen u.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe

--
End of file - 9474 bytes

thanks in advance for any help
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:15 PM   #2
aliEnRIK
Deliciously Dedicated Doubly Diehard MoneySaving Devotee
 
Join Date: Aug 2008
Location: Roaming America ~ hopping from place to place
Post Count: 11,964
Thanked 5,284 Times in 4,778 Posts
Default
Whats happening for you to post it?

TICK this in hijack and click to FIX it ~
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd

Download MALWAREBYTES (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
UPDATE and FULL scan
Post the log here after its deleted everything
aliEnRIK is offline   Reply With Quote Report Post
The Following User Says Thank You to aliEnRIK For This Useful Post: Show me >>
Old 24-11-2009, 9:18 PM   #3
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
C:\Windows\AsScrProlog.exe

the above is whats written at the top of the black box, that flashes up on start up, not sure if thats important?

just out of curiosity but how efficient is system restore? i do have a restore point to just before i removed norton and installed microsoft office, which seems to be when the problems started?
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:24 PM   #4
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
Quote:
Originally Posted by aliEnRIK View Post
Whats happening for you to post it?

TICK this in hijack and click to FIX it ~
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd

Download MALWAREBYTES (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
UPDATE and FULL scan
Post the log here after its deleted everything
hi there, here's the earlier thread
http://forums.moneysavingexpert.com/...html?t=2102601

mwb log after delete -
Malwarebytes' Anti-Malware 1.41
Database version: 3223
Windows 6.0.6001 Service Pack 1

24/11/2009 20:03:07
mbam-log-2009-11-24 (20-03-07).txt

Scan type: Quick Scan
Objects scanned: 93670
Time elapsed: 2 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:26 PM   #5
asininity
Serious MoneySaving Fan
 
Join Date: Mar 2007
Location: a world of pain!
Post Count: 1,535
Thanked 534 Times in 467 Posts
Default
Quote:
Originally Posted by merlin1 View Post
C:\Windows\AsScrProlog.exe

the above is whats written at the top of the black box, that flashes up on start up, not sure if thats important?

just out of curiosity but how efficient is system restore? i do have a restore point to just before i removed norton and installed microsoft office, which seems to be when the problems started?
Its ASUS Camera ScreenSaver.


Hi, we’ve had to remove your signature. If you’re not sure why please read the forum rules or email the forum team if you’re still unsure - MSE Forum Team
asininity is offline   Reply With Quote Report Post
The Following User Says Thank You to asininity For This Useful Post: Show me >>
Old 24-11-2009, 9:29 PM   #6
aliEnRIK
Deliciously Dedicated Doubly Diehard MoneySaving Devotee
 
Join Date: Aug 2008
Location: Roaming America ~ hopping from place to place
Post Count: 11,964
Thanked 5,284 Times in 4,778 Posts
Default
Quote:
Originally Posted by merlin1 View Post
hi there, here's the earlier thread
http://forums.moneysavingexpert.com/...html?t=2102601

mwb log after delete -
Malwarebytes' Anti-Malware 1.41
Database version: 3223
Windows 6.0.6001 Service Pack 1

24/11/2009 20:03:07
mbam-log-2009-11-24 (20-03-07).txt

Scan type: Quick Scan
Objects scanned: 93670
Time elapsed: 2 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Thats not a FULL scan though (please update first too)
aliEnRIK is offline   Reply With Quote Report Post
Old 24-11-2009, 9:29 PM   #7
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
thought it was something ASUS, why would it start to pop up like it is? :confused:
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:30 PM   #8
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
Quote:
Originally Posted by aliEnRIK View Post
Thats not a FULL scan though (please update first too)
oops beg pardon - will do that now....

updated to 3224 and scanning ....
Last edited by merlin1; 24-11-2009 at 9:33 PM..
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:32 PM   #9
asininity
Serious MoneySaving Fan
 
Join Date: Mar 2007
Location: a world of pain!
Post Count: 1,535
Thanked 534 Times in 467 Posts
Default
Check your startup list its in there, I have no idea why its popping up but you can disable it.

Edit: an update to Service Pack 2 would help as well.


Hi, we’ve had to remove your signature. If you’re not sure why please read the forum rules or email the forum team if you’re still unsure - MSE Forum Team
Last edited by asininity; 24-11-2009 at 9:37 PM..
asininity is offline   Reply With Quote Report Post
The Following User Says Thank You to asininity For This Useful Post: Show me >>
Old 24-11-2009, 9:43 PM   #10
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
ok, disabled the asus screen thingy, i might have just had an sp2 update, on shutting down to see what that box said, i did have 50 odd updates, plus 3 major ones that needed configuring :confused: after that defender stopped letting mwb startup at erm... startup..

aaaagh, wots occurin eh!!

10 mins in and mwb not found anything yet,,,,, and scrap the sp2 thing, its still sp1
Last edited by merlin1; 24-11-2009 at 9:47 PM..
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 9:51 PM   #11
aliEnRIK
Deliciously Dedicated Doubly Diehard MoneySaving Devotee
 
Join Date: Aug 2008
Location: Roaming America ~ hopping from place to place
Post Count: 11,964
Thanked 5,284 Times in 4,778 Posts
Default
Quote:
Originally Posted by aliEnRIK View Post

TICK this in hijack and click to FIX it ~
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd

Have you done this?
aliEnRIK is offline   Reply With Quote Report Post
Old 24-11-2009, 9:53 PM   #12
GunJack
Fantastically Fervent MoneySaving Super Fan
 
Join Date: Sep 2006
Location: wish I was back where I was...
Post Count: 3,953
Thanked 3,542 Times in 2,429 Posts
Default
Quote:
Originally Posted by merlin1 View Post
ok, disabled the asus screen thingy, i might have just had an sp2 update, on shutting down to see what that box said, i did have 50 odd updates, plus 3 major ones that needed configuring :confused: after that defender stopped letting mwb startup at erm... startup..

aaaagh, wots occurin eh!!

10 mins in and mwb not found anything yet,,,,, and scrap the sp2 thing, its still sp1
do you not update too often then ??? :confused:


......Gettin' There, Wherever There is......
GunJack is offline   Reply With Quote Report Post
Old 24-11-2009, 9:58 PM   #13
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
Quote:
Originally Posted by aliEnRIK View Post
Have you done this?
i have indeed its gone now, i had to run Hjt as admin this time though, it didnt ask me to before?

hehe, gunjack, its a brand new laptop! i have checked windows update, I'm seeing nothing that mentions sp2.
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 10:04 PM   #14
aliEnRIK
Deliciously Dedicated Doubly Diehard MoneySaving Devotee
 
Join Date: Aug 2008
Location: Roaming America ~ hopping from place to place
Post Count: 11,964
Thanked 5,284 Times in 4,778 Posts
Default
Quote:
Originally Posted by merlin1 View Post
i have indeed its gone now, i had to run Hjt as admin this time though, it didnt ask me to before?

So you only started to get all the updates through after removing it?
aliEnRIK is offline   Reply With Quote Report Post
Old 24-11-2009, 10:08 PM   #15
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
yep, it took 3 shut downs before i stopped getting that red shield by the power off button.

just had a look in computer and my C drive is showing as only having 68gb of 116gb free - whats eaten that amount of gb?!

(MWB at 35 mins, and nothing found yet btw)
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 10:13 PM   #16
aliEnRIK
Deliciously Dedicated Doubly Diehard MoneySaving Devotee
 
Join Date: Aug 2008
Location: Roaming America ~ hopping from place to place
Post Count: 11,964
Thanked 5,284 Times in 4,778 Posts
Default
Make sure you run the AVG REMOVAL TOOL as posted above

That entry asked you to remove in hijack looks very dodgy to me. Either acer have got some cr*p software in it or youve managed to get some sort of infection on it
aliEnRIK is offline   Reply With Quote Report Post
Old 24-11-2009, 10:16 PM   #17
asininity
Serious MoneySaving Fan
 
Join Date: Mar 2007
Location: a world of pain!
Post Count: 1,535
Thanked 534 Times in 467 Posts
Default
Use this to find out whats taking up the most room: http://www.saleensoftware.com/FilePro.aspx


Hi, we’ve had to remove your signature. If you’re not sure why please read the forum rules or email the forum team if you’re still unsure - MSE Forum Team
asininity is offline   Reply With Quote Report Post
The Following User Says Thank You to asininity For This Useful Post: Show me >>
Old 24-11-2009, 10:19 PM   #18
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
Quote:
Originally Posted by aliEnRIK View Post
Make sure you run the AVG REMOVAL TOOL as posted above

That entry asked you to remove in hijack looks very dodgy to me. Either acer have got some cr*p software in it or youve managed to get some sort of infection on it

i'm sorry but you just lost me? avg? acer? just checking we are both in the right thread!
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 10:26 PM   #19
merlin1
MoneySaving Stalwart
 
Join Date: Jun 2009
Post Count: 203
Thanked 999 Times in 103 Posts
Default
asininity - i;ve run that programme, which view tells the most?

the MWB is complete, log below, nothing found...

Malwarebytes' Anti-Malware 1.41
Database version: 3224
Windows 6.0.6001 Service Pack 1

24/11/2009 22:22:32
mbam-log-2009-11-24 (22-22-32).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 233386
Time elapsed: 48 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
merlin1 is offline   Reply With Quote Report Post
Old 24-11-2009, 10:32 PM   #20
asininity
Serious MoneySaving Fan
 
Join Date: Mar 2007
Location: a world of pain!
Post Count: 1,535
Thanked 534 Times in 467 Posts
Default
Scan the C: directory and use the tree size view and navigate through on the lefthand side.


Hi, we’ve had to remove your signature. If you’re not sure why please read the forum rules or email the forum team if you’re still unsure - MSE Forum Team
asininity is offline   Reply With Quote Report Post
Reply
Page 1 of 2 1 2

« Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
 Forum Jump  


All times are GMT. The time now is 6:29 PM.

Contact Us - MoneySavingExpert.com - Archive - Privacy Statement - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
 Forum Jump  

Martin's Money Tips
Restaurant Vouchers
Pizza Slice
9 Feb
Valentine's Flowers Discount Vouchers Cheap Beauty Deals Days Out Vouchers Supermkt Coupons Boost Tesco Points Train & Coach Deals Full Deals List
Ones Not To Miss

Forum Etiquette
Pls be nice to all MoneySavers. There's no such thing as a stupid question, and even if you disagree courtesy helps.
Take care over copyright. Use excerpts and links rather than copying long text. This site asserts copyright on all comments posted on the board.
   
This website is based on journalistic research. It does not constitute financial advice. Any information should be considered in regard to specific circumstances. All tips are followed at your own risk and should be followed up with your own research . See Full Terms & Conditions and Privacy Policy. ® Martin Lewis and MoneySavingExpert.com. 'Martin Lewis' and 'Money Saving Expert' are registered trademarks belonging to Martin Lewis.
[Sitemap | Q & As | Contacts | About the Site | Accessibility | Site's Funding]