The Red Hat Linux SetUp offers the option of a GUI set up or a text based set up. Most non-Microsoft set ups don't offer this option. I am presented with a CLI screen with the command line a:%26gt; and I need to know how to proceed from there. The installation would be to the 'd' drive - 'c', 'e' and 'i' are all already occupied. The 'd' drive is currently an NTFS partition.
Can anybody assist me in the installation of a non-Microsoft Operating System?
A gui setup is what a M$ or apple os is now. Graphical User Interface. Pick the easier GUI setup. The problem with installing any OS is that the hard drive must be low level formatted and then single or multiple partitioned(i.e. Linux OS won't load on NTFS, FAT16, FAT32, etc. formats)You can get this low level format software from the hard drive manufacturer's website. WARNING: YOU WILL PERMANENTLY LOSE ALL YOUR INFORMATION ON THE DRIVE YOU ARE LOW LEVEL FORMATTING, BACKUP ANYTHING YOU WISH TO SAVE. You must have a ready and wating open hd with nothing on it. Now I know there are alot of other ways to this answer this person's problem to make it work, this is just a quick and easy way. Or you could go to Red Hat's site and look for the installation FAQ. Or you could ask this question at a Linux discussion site; they love to help people graduate from the handcuffs of M$.
Reply:you really need to use the GUI installer, for you are too much a noob to even use the 'linux fdisk' program in CLI (Command Line Interface).
Better yet, would be that you grab a LiveCDrom of http://www.mepis.org that is Kubuntu with 1% more goodness. Installs in about 20 minutes, with the click on the "Install" icon.
Thursday, July 9, 2009
A Cisco 831 router that always boot to ROMMON 1>, what can I do to configure it using IOS commands?
I have a new Cisco 831 Router, and I was trying to
configure it using CLI, and was connected to a PC
through console port.
Every thing was going fine, but all of the sudden,
Electricity goes off, and when it comes back, the
Router couldn't boot the normal way, and always gos to
RomMonitor mode, as follows:
System Bootstrap, Version 12.2(11r)YV3, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
C800/SOHO series (Board ID: 29-129) platform with
65536 Kbytes of main memory
rommon 1 %26gt;
The result of dir flash: command is:
File size Checksum File name
2447 bytes (0x98f) 0x9d6c runing-config
The result of boot command is:
boot: cannot determine first file name on device
"flash:"
rommon 3 %26gt;
The result of reset command is:
System Bootstrap, Version 12.2(11r)YV3, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
C800/SOHO series (Board ID: 29-129) platform with
65536 Kbytes of main memory
rommon 1 %26gt;
Please, tell me what to do, to be able to use the
router, and configure it using the IOS commands
A Cisco 831 router that always boot to ROMMON 1%26gt;, what can I do to configure it using IOS commands?
http://www.cisco.com/en/US/products/hw/r...
Reply:Type confreg 0x2142 at the rommon 1%26gt; prompt to boot from Flash without loading the configuration.
Type reset at the rommon 2%26gt; prompt.
Reply:If you upload the flash at this time your IOS is corrupted.
Try to upload it again.
Use UPS ......
Reply:You have to change the config register. Type 'confreg 0x142' at the prompt, confirm, type command 'reset' to reboot.
Commands vary by cisco products, can also be config-reg
HTH
configure it using CLI, and was connected to a PC
through console port.
Every thing was going fine, but all of the sudden,
Electricity goes off, and when it comes back, the
Router couldn't boot the normal way, and always gos to
RomMonitor mode, as follows:
System Bootstrap, Version 12.2(11r)YV3, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
C800/SOHO series (Board ID: 29-129) platform with
65536 Kbytes of main memory
rommon 1 %26gt;
The result of dir flash: command is:
File size Checksum File name
2447 bytes (0x98f) 0x9d6c runing-config
The result of boot command is:
boot: cannot determine first file name on device
"flash:"
rommon 3 %26gt;
The result of reset command is:
System Bootstrap, Version 12.2(11r)YV3, RELEASE
SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2004 by cisco Systems, Inc.
C800/SOHO series (Board ID: 29-129) platform with
65536 Kbytes of main memory
rommon 1 %26gt;
Please, tell me what to do, to be able to use the
router, and configure it using the IOS commands
A Cisco 831 router that always boot to ROMMON 1%26gt;, what can I do to configure it using IOS commands?
http://www.cisco.com/en/US/products/hw/r...
Reply:Type confreg 0x2142 at the rommon 1%26gt; prompt to boot from Flash without loading the configuration.
Type reset at the rommon 2%26gt; prompt.
Reply:If you upload the flash at this time your IOS is corrupted.
Try to upload it again.
Use UPS ......
Reply:You have to change the config register. Type 'confreg 0x142' at the prompt, confirm, type command 'reset' to reboot.
Commands vary by cisco products, can also be config-reg
HTH
Help with these questions?
16 Which characteristic typifies robustness in a server system?
the ability to support extra video adapters and monitors
the ability to provide multiple remote access connections
the ability to survive the failure of one or more components and continue functioning
the ability to support redundant backup systems
17 Where does the address http://127.0.0.1 point?
to the closest web server
to the local host
to the nearest DNS server
to the local intranet
18 A module needs to be loaded. However, confirmation that the Linux kernel can load the module is important. Which of the following options of the insmod program will accomplish this task?
-s
-p
-f
-k
19 When setting up a hard disk, what are the three possible types of partitions?
primary, secondary, and logical
primary, logical, and extended
C, D, and E
boot, program, and data
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
oscilloscope
LAN meter
TDR
cable tester
21 In Linux, which symbol represents the root directory?
*
/
#
\
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
root, Administrator
Admin, root
Administrator, root
root, Admin
23 What is the most desirable method of documenting Linux system configurations and changes?
an electronic logbook
a handwritten logbook
a tar file of the /etc directory
a tar file of the init config
24 Why is it important to install X Windows on all Linux workstations?
The CLI is unavailable for users on a client workstation.
It is required for network access.
Users are not familiar with the CLI.
Almost every workstation program requires X Window in order to run.
25 Which list specifies the items needed to set up email for Linux?
mail user agent, mailbox, mailbox protocol
transport protocol, mail user agent, mail transfer agent
mailbox protocol, mail user agent, transport protocol
mail transfer agent, mail protocol, mail user agent
26 Which list best describes the main features to consider when selecting a NOS?
manufacturer, NIC, security, scalability, performance
performance, management/monitoring tools, security, scalability, and robustness
scalability, management tools, size, NIC, BUS type
size, performance, security, bus architecture, scalability
27 You have decided to install your new Linux distribution by using the bootable CD that came with it. What must be configured before you can boot from the CD?
CMOS
NVRAM
BIOS
Hard drive
28 What is the main Internet protocol used for creating a connection with a remote computer?
FTP
SNMP
IMAP
Telnet
29 What is the physical topology when all the computers in a network connect to a central point?
point-to-point
star
ring
bus
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
The device does not physically exist.
The device drivers are not installed.
The device is not compatible with Windows 2000.
The device is not supported.
Help with these questions?
16)the ability to survive the failure of one or more components and continue functioning.
17)to the localHost
18)-p
19)Primary,Secondary and extended
21) /
22) root Administrator
23) a tar file of the /etc directory
25) mailbox protocol, mail user agent, transport protocol
28) Telnet
29) Bus
Reply:Admittedly I know enough about Linux to be dangerous. But I will take a shot at these.
16) The ability to survive failure of one or more components and continue functioning
17) The local host
18) -p
19)Primary, Locical, Extended
20)Lan Meter
21) #
22) Administrator, Root
23) Tar file in etc
24) Users are not familiar with the CLI
25) mailbox protocol, mail user agent, transport protocol
26) performance, management/monitoring tools, security, scalability, and robustness
27) BIOS
28)Telenet
29) star
30)The device drivers are not installed
Reply:17 Localhost
27 BIOS
29 Star
30 Drivers aren't installed.
balsam
the ability to support extra video adapters and monitors
the ability to provide multiple remote access connections
the ability to survive the failure of one or more components and continue functioning
the ability to support redundant backup systems
17 Where does the address http://127.0.0.1 point?
to the closest web server
to the local host
to the nearest DNS server
to the local intranet
18 A module needs to be loaded. However, confirmation that the Linux kernel can load the module is important. Which of the following options of the insmod program will accomplish this task?
-s
-p
-f
-k
19 When setting up a hard disk, what are the three possible types of partitions?
primary, secondary, and logical
primary, logical, and extended
C, D, and E
boot, program, and data
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
oscilloscope
LAN meter
TDR
cable tester
21 In Linux, which symbol represents the root directory?
*
/
#
\
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
root, Administrator
Admin, root
Administrator, root
root, Admin
23 What is the most desirable method of documenting Linux system configurations and changes?
an electronic logbook
a handwritten logbook
a tar file of the /etc directory
a tar file of the init config
24 Why is it important to install X Windows on all Linux workstations?
The CLI is unavailable for users on a client workstation.
It is required for network access.
Users are not familiar with the CLI.
Almost every workstation program requires X Window in order to run.
25 Which list specifies the items needed to set up email for Linux?
mail user agent, mailbox, mailbox protocol
transport protocol, mail user agent, mail transfer agent
mailbox protocol, mail user agent, transport protocol
mail transfer agent, mail protocol, mail user agent
26 Which list best describes the main features to consider when selecting a NOS?
manufacturer, NIC, security, scalability, performance
performance, management/monitoring tools, security, scalability, and robustness
scalability, management tools, size, NIC, BUS type
size, performance, security, bus architecture, scalability
27 You have decided to install your new Linux distribution by using the bootable CD that came with it. What must be configured before you can boot from the CD?
CMOS
NVRAM
BIOS
Hard drive
28 What is the main Internet protocol used for creating a connection with a remote computer?
FTP
SNMP
IMAP
Telnet
29 What is the physical topology when all the computers in a network connect to a central point?
point-to-point
star
ring
bus
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
The device does not physically exist.
The device drivers are not installed.
The device is not compatible with Windows 2000.
The device is not supported.
Help with these questions?
16)the ability to survive the failure of one or more components and continue functioning.
17)to the localHost
18)-p
19)Primary,Secondary and extended
21) /
22) root Administrator
23) a tar file of the /etc directory
25) mailbox protocol, mail user agent, transport protocol
28) Telnet
29) Bus
Reply:Admittedly I know enough about Linux to be dangerous. But I will take a shot at these.
16) The ability to survive failure of one or more components and continue functioning
17) The local host
18) -p
19)Primary, Locical, Extended
20)Lan Meter
21) #
22) Administrator, Root
23) Tar file in etc
24) Users are not familiar with the CLI
25) mailbox protocol, mail user agent, transport protocol
26) performance, management/monitoring tools, security, scalability, and robustness
27) BIOS
28)Telenet
29) star
30)The device drivers are not installed
Reply:17 Localhost
27 BIOS
29 Star
30 Drivers aren't installed.
balsam
Learn to program GUI applications for windows?
Im looking for a programming language that will let me create graphical windows applications and has GUI tools to make the programs.
Visual C++ looks appealing. but as a beginner i read that C++ is too complicated and i should first learn an easier language.
I read everywhere that i should learn Python but i am not interested in it anymore because i see all the programs written with python are scripts to be used in a CLI.
Im neither interested in Visual Basic, as any good programmer says it sucks and better stay away.
I read Java is slow...
So what are good options to start learning and jump to C++ in the future after i gain some knowledge and basics of programming?
Thanks!
Learn to program GUI applications for windows?
"Im looking for a programming language that will let me create graphical windows applications and has GUI tools to make the programs".
Any language with GUI bindings qualifies. C, C++, C#, VB.NET, Java, Python, TCL, and so on have bindings.
"but as a beginner i read that C++ is too complicated and i should first learn an easier language."
You can start with C++. Just get a good book. Two mistakes you can make with C++ is starting with a bad resource or book. And believe me, there's countless "experts" who not only write bad code but teach it too. The other mistake is to jump into windows programming with C++...without knowing C++ fully.
Go to http://www.accu.org . They have book reviews that check for technical accuracy. Basically, there's two books I think that are really good for learning C++: Lippman's C++ Primer and Koenig's Accelerated C++. They are both written by experts who know what they are talking about.
"but i am not interested in it anymore because i see all the programs written with python are scripts to be used in a CLI"
Or you can make GUI programs with it if you want. It's not any different when you first start with another programming language you know? You'll start with CLI programs because windows programming requires you to have competent knowledge in your programming language.
"Im neither interested in Visual Basic, as any good programmer says it sucks and better stay away."
I've heard that VB.NET is better, but don't take my word for it.
"I read Java is slow..."
Good programmers can write good performance Java programs.
"So what are good options to start learning and jump to C++ in the future after i gain some knowledge and basics of programming? "
If this is windows programming, it's basically C# or C++.
Reply:Try vb.net
Get the free ide and u can and drop gui like textbox
the language is very esy to master.
http://msdn.microsoft.com/vstudio/expres...
Reply:Visual basic is ok. I am one of the best programmers in my state. Where did you find this information
Visual C++ looks appealing. but as a beginner i read that C++ is too complicated and i should first learn an easier language.
I read everywhere that i should learn Python but i am not interested in it anymore because i see all the programs written with python are scripts to be used in a CLI.
Im neither interested in Visual Basic, as any good programmer says it sucks and better stay away.
I read Java is slow...
So what are good options to start learning and jump to C++ in the future after i gain some knowledge and basics of programming?
Thanks!
Learn to program GUI applications for windows?
"Im looking for a programming language that will let me create graphical windows applications and has GUI tools to make the programs".
Any language with GUI bindings qualifies. C, C++, C#, VB.NET, Java, Python, TCL, and so on have bindings.
"but as a beginner i read that C++ is too complicated and i should first learn an easier language."
You can start with C++. Just get a good book. Two mistakes you can make with C++ is starting with a bad resource or book. And believe me, there's countless "experts" who not only write bad code but teach it too. The other mistake is to jump into windows programming with C++...without knowing C++ fully.
Go to http://www.accu.org . They have book reviews that check for technical accuracy. Basically, there's two books I think that are really good for learning C++: Lippman's C++ Primer and Koenig's Accelerated C++. They are both written by experts who know what they are talking about.
"but i am not interested in it anymore because i see all the programs written with python are scripts to be used in a CLI"
Or you can make GUI programs with it if you want. It's not any different when you first start with another programming language you know? You'll start with CLI programs because windows programming requires you to have competent knowledge in your programming language.
"Im neither interested in Visual Basic, as any good programmer says it sucks and better stay away."
I've heard that VB.NET is better, but don't take my word for it.
"I read Java is slow..."
Good programmers can write good performance Java programs.
"So what are good options to start learning and jump to C++ in the future after i gain some knowledge and basics of programming? "
If this is windows programming, it's basically C# or C++.
Reply:Try vb.net
Get the free ide and u can and drop gui like textbox
the language is very esy to master.
http://msdn.microsoft.com/vstudio/expres...
Reply:Visual basic is ok. I am one of the best programmers in my state. Where did you find this information
Can you help me with these questions?
16 Which characteristic typifies robustness in a server system?
the ability to support extra video adapters and monitors
the ability to provide multiple remote access connections
the ability to survive the failure of one or more components and continue functioning
the ability to support redundant backup systems
17 Where does the address http://127.0.0.1 point?
to the closest web server
to the local host
to the nearest DNS server
to the local intranet
18 A module needs to be loaded. However, confirmation that the Linux kernel can load the module is important. Which of the following options of the insmod program will accomplish this task?
-s
-p
-f
-k
19 When setting up a hard disk, what are the three possible types of partitions?
primary, secondary, and logical
primary, logical, and extended
C, D, and E
boot, program, and data
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
oscilloscope
LAN meter
TDR
cable tester
21 In Linux, which symbol represents the root directory?
*
/
#
\
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
root, Administrator
Admin, root
Administrator, root
root, Admin
23 What is the most desirable method of documenting Linux system configurations and changes?
an electronic logbook
a handwritten logbook
a tar file of the /etc directory
a tar file of the init config
24 Why is it important to install X Windows on all Linux workstations?
The CLI is unavailable for users on a client workstation.
It is required for network access.
Users are not familiar with the CLI.
Almost every workstation program requires X Window in order to run.
25 Which list specifies the items needed to set up email for Linux?
mail user agent, mailbox, mailbox protocol
transport protocol, mail user agent, mail transfer agent
mailbox protocol, mail user agent, transport protocol
mail transfer agent, mail protocol, mail user agent
26 Which list best describes the main features to consider when selecting a NOS?
manufacturer, NIC, security, scalability, performance
performance, management/monitoring tools, security, scalability, and robustness
scalability, management tools, size, NIC, BUS type
size, performance, security, bus architecture, scalability
27 You have decided to install your new Linux distribution by using the bootable CD that came with it. What must be configured before you can boot from the CD?
CMOS
NVRAM
BIOS
Hard drive
28 What is the main Internet protocol used for creating a connection with a remote computer?
FTP
SNMP
IMAP
Telnet
29 What is the physical topology when all the computers in a network connect to a central point?
point-to-point
star
ring
bus
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
The device does not physically exist.
The device drivers are not installed.
The device is not compatible with Windows 2000.
The device is not supported.
Can you help me with these questions?
You should have studied.
Reply:I only know a couple of the answers, but they should help.
17 Where does the address http://127.0.0.1 point?
A. The local host. It is the loopback address.
19 When setting up a hard disk, what are the three possible types of partitions?
A. Primary, Extended, and Logical.
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
A. LAN Meter. Not really sure, but this is the best choice.
21 In Linux, which symbol represents the root directory?
A. \
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
A. Administrator, root
26 Which list best describes the main features to consider when selecting a NOS?
A. performance, management/monitoring tools, security, scalability, and robustness
29 What is the physical topology when all the computers in a network connect to a central point?
A. Star topology.
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
A. The drivers have not been installed
Hope these help
the ability to support extra video adapters and monitors
the ability to provide multiple remote access connections
the ability to survive the failure of one or more components and continue functioning
the ability to support redundant backup systems
17 Where does the address http://127.0.0.1 point?
to the closest web server
to the local host
to the nearest DNS server
to the local intranet
18 A module needs to be loaded. However, confirmation that the Linux kernel can load the module is important. Which of the following options of the insmod program will accomplish this task?
-s
-p
-f
-k
19 When setting up a hard disk, what are the three possible types of partitions?
primary, secondary, and logical
primary, logical, and extended
C, D, and E
boot, program, and data
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
oscilloscope
LAN meter
TDR
cable tester
21 In Linux, which symbol represents the root directory?
*
/
#
\
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
root, Administrator
Admin, root
Administrator, root
root, Admin
23 What is the most desirable method of documenting Linux system configurations and changes?
an electronic logbook
a handwritten logbook
a tar file of the /etc directory
a tar file of the init config
24 Why is it important to install X Windows on all Linux workstations?
The CLI is unavailable for users on a client workstation.
It is required for network access.
Users are not familiar with the CLI.
Almost every workstation program requires X Window in order to run.
25 Which list specifies the items needed to set up email for Linux?
mail user agent, mailbox, mailbox protocol
transport protocol, mail user agent, mail transfer agent
mailbox protocol, mail user agent, transport protocol
mail transfer agent, mail protocol, mail user agent
26 Which list best describes the main features to consider when selecting a NOS?
manufacturer, NIC, security, scalability, performance
performance, management/monitoring tools, security, scalability, and robustness
scalability, management tools, size, NIC, BUS type
size, performance, security, bus architecture, scalability
27 You have decided to install your new Linux distribution by using the bootable CD that came with it. What must be configured before you can boot from the CD?
CMOS
NVRAM
BIOS
Hard drive
28 What is the main Internet protocol used for creating a connection with a remote computer?
FTP
SNMP
IMAP
Telnet
29 What is the physical topology when all the computers in a network connect to a central point?
point-to-point
star
ring
bus
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
The device does not physically exist.
The device drivers are not installed.
The device is not compatible with Windows 2000.
The device is not supported.
Can you help me with these questions?
You should have studied.
Reply:I only know a couple of the answers, but they should help.
17 Where does the address http://127.0.0.1 point?
A. The local host. It is the loopback address.
19 When setting up a hard disk, what are the three possible types of partitions?
A. Primary, Extended, and Logical.
20 Which device is used to check for broadcasts, collisions, usage levels, and errors on an Ethernet network?
A. LAN Meter. Not really sure, but this is the best choice.
21 In Linux, which symbol represents the root directory?
A. \
22 What are the default names of the administrative accounts on a Windows and UNIX NOS, respectively?
A. Administrator, root
26 Which list best describes the main features to consider when selecting a NOS?
A. performance, management/monitoring tools, security, scalability, and robustness
29 What is the physical topology when all the computers in a network connect to a central point?
A. Star topology.
30 In Windows 2000 Device Manager, what does a question mark in a yellow circle next to a device indicate?
A. The drivers have not been installed
Hope these help
Can anyone tell me this is normal or should i delete any?
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045}-(... file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run:[NvCplDaemon] RUNDLL32.EXE.C:\WINDOWS\system32\NvCpl.d...
O4 - HKLM\..\Run:[nwiz] nwiz.exe/install
O4 - HKLM\..\Run:[NvMediaCentre]RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTas...
O8 -Extra Context Menu Item: Add to windows %26amp;live favorites - http:\\favorites.live.com\quickadd.aspx
O9 Extra Button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https:windowsonecare.com/install/cli/1.1...
O21 - SSODL: WPDShServiceObj - {AAA288BA - 9A4C - 45B0-95D7-94D524869DB5} - C:\WINDWS\system32\WPDShServiceObj.dll
O23 - Service: Installdriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\
Can anyone tell me this is normal or should i delete any?
The ones that say no file, if there really is no file then delete them also ask Dr. Watson what is wrong. Not the best protector of computers.
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run:[NvCplDaemon] RUNDLL32.EXE.C:\WINDOWS\system32\NvCpl.d...
O4 - HKLM\..\Run:[nwiz] nwiz.exe/install
O4 - HKLM\..\Run:[NvMediaCentre]RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTas...
O8 -Extra Context Menu Item: Add to windows %26amp;live favorites - http:\\favorites.live.com\quickadd.aspx
O9 Extra Button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https:windowsonecare.com/install/cli/1.1...
O21 - SSODL: WPDShServiceObj - {AAA288BA - 9A4C - 45B0-95D7-94D524869DB5} - C:\WINDWS\system32\WPDShServiceObj.dll
O23 - Service: Installdriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\
Can anyone tell me this is normal or should i delete any?
The ones that say no file, if there really is no file then delete them also ask Dr. Watson what is wrong. Not the best protector of computers.
I need help??
When I turn my computer on I get a pop up on my mcafee "saying that we have remove a a potentally harmful script name vbs/psyme how do remove it??, and it also my mcafee says
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
Affected Items: HKEY_USERS\S-1-5-21-1292428093-839522115... Settings\ZoneMap\Ranges\me\
Also my computer says my cd has been closed because it is unstable and it wont let me do anything on it how do i fix it.
I need help??
REinstall Windows and everythin else and stop going to portal sites
wisteria
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
Affected Items: HKEY_USERS\S-1-5-21-1292428093-839522115... Settings\ZoneMap\Ranges\me\
Also my computer says my cd has been closed because it is unstable and it wont let me do anything on it how do i fix it.
I need help??
REinstall Windows and everythin else and stop going to portal sites
wisteria
Is this credit card a good choice for me...?
I have bad credit... or none, i cant get approved for anything else and dont understand all the red tape! HELP! does anyone have this card? THE ORCHARD BANK CREDIT CARD
200 min security deposit
35 dollar annual fee
Variable Rate Information Your APRs may vary. The rates are determined monthly by adding the Index (described below) and:
6.65% ("Spread") for the Customary APR for credit card purchases.
16.90% ("Spread") for the Cash APR for cash advances, including balance transfers, if applicable, and cash advances made by credit card check.
22.24% ("Spread") for the Default APR.
For each billing cycle, the Index is determined in the month prior to the month in which the billing cycle ends. In that prior month, the highest (U.S.) "Prime Rate" published in the Money Rates Table of The Wall Street Journal is selected (the "Index"). If the Index has changed, the new variable rates will take effect with the billing cycle that ends on or after the first day of the month following the Index change.
Grace Period for Repayment of Balances for Purchases You have 25 days from the date of the periodic statement to avoid a Finance Charge on new credit card purchases, provided you paid your previous balance in full.
Method of Computing Balance for Purchases Average Daily Balance (including new purchases).
Annual Fee $35 per year
Minimum Finance Charge $1.00 for each billing cycle in which a Periodic Finance Charge is payable.
Foreign Transaction Fee Finance Charge 1% of the U.S. dollar amount will apply to transactions made in a foreign currency.
Cash Advance Fee:$5 or 5% on all cash advances, whichever is greater; unless otherwise disclosed. Finance Charges accrue from the date of transaction. Cash advances will be limited. Your cash advance limit is disclosed on your billing statement. Late Payment Fee: The Late Payment Fee will vary based on the amount of your outstanding balance on your Payment Due Date, and will be: $30 if your balance is more than $0 up to and including $1000; or $35 if your balance is greater than $1000. Overlimit Fee: $30. Accessing the full amount or most of your available credit may result in an overlimit fee. Credit Limit Increase (CLI) Fee: If requested and approved, a CLI fee of up to $50% of the CLI may be charged to your Account, depending on your creditworthiness. Closed Account Service Fee: $3.50 per month on closed accounts with a debit balance.
The variable Customary APR will apply to credit card purchases.
The variable Cash APR will apply to cash advances, including balance transfers, if available, and cash advances made by credit card check.
If at any time your Account is subject to the Customary and/or Cash APRs, and you fail to make at least your Minimum Payment in time to be credited to your Account by the Payment Due Date, or your Account exceeds your credit limit, your entire Account balance will increase to the Default APR.
Note: The Orchard Bank Secured MasterCard requires a minimum deposit of $200 for a minimum $200 line of credit. For more information on the Orchard Bank Secured MasterCard, see our Secured Card FAQs.
At our discretion, payments are generally applied to interest, fees, and then principal balances. We apply your payments to lower APR balances before higher APR balances. The application of payments is subject to change at any time, without notice.
IMPORTANT INFORMATION
There is a maximum of two (2) Accounts issued by HSBC Bank Nevada, N.A. per customer.
If within 90 days of your Account open date, you decide you do not want the account, you can call the customer service number provided on the back of your card to cancel. Any fees, if assessed, will be reversed at no cost to you if you have not used the card.
IMPORTANT INFORMATION ABOUT PROCEDURES FOR OPENING A NEW ACCOUNT
To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an Account. What this means for you: When you open an Account, we will ask you for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver's license or other identifying documents.
Notice to California Residents:
Except otherwise limited by applicable law, we may provide credit information about your account to our affiliates from time to time. This information may be used to qualify you for other credit offers. Married persons may apply for a separate account.
Notice to New York Residents:
Consumer reports may be requested in connection with the processing of this application and any resulting account. Upon your request, we will inform you of the names and addresses of any consumer reporting agencies which have provided us with such reports.
Notice to Ohio Residents:
The Ohio laws against discrimination require that all creditors make credit equally available to all creditworthy customers, and that credit reporting agencies maintain separate credit histories on each individual upon request. The Ohio Civil Rights Commission administers compliance with the law.
Notice to Married Wisconsin Residents:
No agreement, court order, or individual statement applying to marital property will adversely affect a creditor's interests unless prior to the time credit is granted the creditor is furnished with a copy of the agreement, court order, or statement, or has actual knowledge of the adverse provision. You must indicate your marital status for this application to be processed.
INTEREST RATES AND FINANCE CHARGES
Interest Rates
The APRs on your Account are variable rates and are determined by adding a specified amount ("Spread") to an Index (described below). The APR is divided by 365 and rounded to the next highest hundred thousandth of a percentage point to determine your Daily Periodic Rate. The Daily Periodic Rate is used to determine the amount of Periodic Finance Charges (see Finance Charges).
Monthly Index For each billing cycle, the Index is determined in the month prior to the month in which the billing cycle ends. In that prior month, the highest (U.S.) "Prime Rate" published in the Money Rates table of The Wall Street Journal is selected (the "Index"). If the Index has changed, the new variable rates will take effect with the billing cycle that ends on or after the first day of the month following the Index change.
An increase in the Index will increase your applicable Daily Periodic Rates which may increase the Finance Charge due on your Account and may increase the Minimum Payment and Current Payment Due. Each time any APR changes, we will apply it to any existing balances, excluding any fixed rate Promotional or Introductory APR.
Purchase APR Your variable Customary APR applies to credit card purchases. The Daily Periodic Rate is based on 1/365th of the Index plus 6.65% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .04082% (corresponding 14.90% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .04082% (corresponding 14.90% ANNUAL PERCENTAGE RATE).
Cash APR Your variable Cash APR applies to cash advances, including balance transfers, if available, and cash advances made by credit card check. The Daily Periodic Rate is based on 1/365th of the Index plus 16.90% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .06890% (corresponding 25.15% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .05726% (corresponding 20.90% ANNUAL PERCENTAGE RATE).
If at any time your Account is subject to the Customary and/or Cash APRs, and you fail to make at least your Minimum Payment in time to be credited to your Account by the Payment Due Date, or your Account exceeds your credit limit, your entire Account balance will increase to the variable Default APR. At our discretion, your Account may return to the Customary APR after five consecutive months of on-time payments of at least the Current Payment Due, without exceeding your credit limit.
Default APR The Daily Periodic Rate for the variable Default APR is based on 1/365th of the Index plus 22.24% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .08353% (corresponding 30.49% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .08079% (corresponding 29.49% ANNUAL PERCENTAGE RATE).
Finance Charges
Finance Charges are the total of the greater of (a) Minimum Finance Charge, or (b) periodic Finance Charges, and any applicable (c) Cash Advance Fee Finance Charges, (d) Foreign Transaction Fee Finance Charge, (e) Credit Limit Increase Fee Finance Charge, (f) Closed Account Service Fee Finance Charges, and (g) Processing Fee Finance Charge.
(a) Minimum Finance Charge. A Finance Charge that is assessed in lieu of a lesser periodic Finance Charge in any billing cycle in which a periodic Finance Charge is payable. This fee is $1.00.
(b) Periodic Finance Charges. Periodic Finance Charges are computed by multiplying the Average Daily Balance for each category of transactions shown on your statement (e.g., purchases, balance transfers, cash advances) by the applicable Daily Periodic Rate and then multiplying the result by the number of days in the billing cycle. To calculate the Daily Balances, we take the beginning debit balance for each category of transactions each day, add any new transactions, any previous day's periodic Finance Charges, any assessed fees and charges, and subtract any payments and/or credits. If a debit transaction posts after the beginning of your billing cycle, but the transaction occurred prior to the beginning of your billing cycle, the applicable Daily Balance will be adjusted to include the transaction amount and any previous day's periodic Finance Charges for each day the transaction amount was outstanding prior to the beginning of the current billing cycle. Then, for each transaction category, we add the Daily Balances for the billing cycle together and divide the total by the number of days in the billing cycle. This is the Average Daily Balance for each transaction category. (1) Credit Card Purchases. Periodic Finance Charges begin to accrue on the date of the transaction and continue to accrue until payment in full is credited to your Account. However, there is a 25 day Grace Period on new credit card purchases. That means, if the New Balance shown on your last statement is paid in full by the Payment Due Date for that statement, periodic Finance Charges will not be imposed on new credit card purchases, provided the New Balance for the current billing cycle is paid in full by the Payment Due Date for that billing cycle. If, however, the New Balance is not paid in full by the Payment Due Date for the immediately preceding billing cycle, periodic Finance Charges will be incurred on new credit card purchases (i.e., purchases appearing for the first time in the current cycle) from the date of the transaction and on the previously billed but unpaid credit card purchases form the first day of the current cycle.
(2) Cash Advances (including balance transfer and credit card checks). Periodic Finance Charges begin to accrue on the date of the transaction and continue to accrue until payment in full is credited to your Account. There is no Grace Period on cash advances.
Periodic Finance Charges will be calculated using the Daily Periodic Rate in effect on the statement closing date.
(c) Cash Advance Fee Finance Charges. Cash advances include all advances to get cash over the counter, through an ATM, balance transfers (if available), credit card checks, or other "cash-like" transactions (such as purchasing a money order, traveler's check, casino or betting chip, or a lottery ticket) as determined by us. A Finance Charge will be computed on the amount of each cash advance as of the date of the transaction. The Cash Advance Fee FINANCE CHARGE for all cash advances is 5%, subject to a minimum FINANCE CHARGE of $5, unless otherwise disclosed.
(d) Foreign Transaction Fee Finance Charge. A Foreign Transaction Fee FINANCE CHARGE equal to 1% of the U.S. dollar amount is assessed on transactions made in a foreign currency, as of the transaction date.
(e) Credit Limit Increase Fee Finance Charge. If you request and are approved for a credit limit increase ("CLI"), a CLI Fee FINANCE CHARGE of up to 50% of the CLI may be assessed to your Account, depending on your creditworthiness.
(f) Closed Account Service Fee Finance Charge. A $3.50 per month FINANCE CHARGE is assessed to the Account for each billing cycle whenever that Account is closed with a debit balance.
The application of any Finance Charge other than a periodic Finance Charge may cause the APR on the billing statement on which this Finance Charge first appears to exceed the Nominal APR.
ACCOUNT FEES
Annual Fee/Periodic Membership Fee
Your Account is subject to a $35 Annual Fee for each year your Account is open or closed with a balance. If you close your Account within the first 90 days your Account is open, the Annual Fee is refundable so long as you have not used the Account.
Late Payment Fee
A Late Payment Fee is assessed for each billing cycle in which at least the Minimum Payment, and any amount past due, is not paid in time to be credited to the Account by the Payment Due Date. The Late Payment Fee will vary based on the amount of your outstanding balance on your Payment Due Date, or during the period up to 5 days after your Payment Due Date, as determined by us, and will be: $30 if your balance is more than $0 up to and including $1000; or $35 if your balance is greater than $1000.
Overlimit Fee
An Overlimit Fee is assessed if your Account balance exceeds the applicable credit limit at any time during a billing cycle. We may impose this fee even if we authorize or impose any charges that cause your balance to exceed the credit limit. This fee is $30.
Other Fees and Charges
Returned Payment Fee
A Returned Payment Fee is assessed to your Account each time a payment check, automatic payment deduction, or other payment method is not honored or is returned unsatisfied by the bank or other financial institution. Any payment returned unsatisfied for any reason may be reposted to any type of transaction (i.e. cash advance, purchases, etc.) and Finance Charges may be reinstated back to the payment date at the APR being charged for that transaction. This fee is $30.
Returned Check Fee
A Returned Check Fee is assessed to the Account each time a credit card check, balance transfer check (if available), electronic check or other Account access device is returned unsatisfied by us for any reason. This fee is $30.
Check by Phone
A Check by Phone Fee may be assessed to the Account each time a payment is made by telephone, even if the payment is made by someone other than you. The amount of this fee will be disclosed at the time such payment is requested.
Stop Payment Fee
A Stop Payment Fee is added to the cash advance balance when a payment of a credit card check is stopped at your request. Payment may be stopped on a credit card check by notifying us in writing or by calling us at the telephone number listed on the Account billing statement, so long as such check has not already been processed. A stop payment request must include the check number, payee, amount and date of the credit card check on which payment is to be stopped. If a stop payment is requested by telephone, the call must be confirmed in writing within 14 days. A written stop payment will remain in effect for six months unless renewed in writing. This fee is $29.
Send stop payment requests to P.O. Box 81622, Salinas, CA 93912-1622.
Research Fee
A $7 Research Fee is assessed to the Account for each sales slip copy, $3 for each statement copy, and $10 for each application copy upon request.
ADDITIONAL TERMS
Arbitration
The Cardmember Agreement and Disclosure Statement ("Agreement") that you will receive with your card, if you are approved for credit, provides that certain disputes are subject to binding arbitration. Arbitration replaces the right to go to court, including the right to a jury and the right to participate in a class action or similar proceeding. Please read the "Arbitration" section of the Agreement carefully.
YOUR BILLING RIGHTS
What To Do If There's An Error In Your Bill
YOUR BILLING RIGHTS - KEEP THIS NOTICE FOR FUTURE USE
This notice contains important information about your rights and our responsibilities under the Fair Credit Billing Act.
NOTIFY US IN CASE OF ERRORS OR QUESTIONS ABOUT YOUR BILL
If you think your bill is wrong, or if you need more information about a transaction on your bill, write to us (on a separate sheet) at the address listed on your billing statement. Write us as soon as possible. We must hear from you no later than 60 days after we sent you the first bill on which the error or problem appeared. You can telephone us, but doing so will not preserve your rights.
Please include the following information in your letter:
Your name, account number and signature;
The dollar amount of the suspected error; and
Describe the error and explain, if you can, why you believe there is an error.
If you need more information, describe the item you are not sure about. If you have authorized us to pay your Account bill automatically from your savings or checking account, you can stop the payment on any amount you think is wrong. To stop the payment, your letter must reach us three business days before the automatic payment is scheduled to occur.
YOUR RIGHTS AND OUR RESPONSIBILITIES AFTER WE RECEIVE YOUR WRITTEN NOTICE:
We must acknowledge your letter within 30 days, unless we have corrected the error by then. Within 90 days, we must either correct the error or explain why we believe the bill was correct.
After we receive your letter, we cannot try to collect any amount you question, or report you as delinquent. We can continue to bill you for the amount you question, including Finance Charges, and we can apply any unpaid amount against your Credit Limit. You do not have to pay any questioned amount while we are investigating, but you are still obligated to pay the parts of your bill that are not in question.
If we find that we made a mistake on your bill, you will not have to pay any Finance Charges related to any questioned amount. If we didn't make a mistake, you may have to pay Finance Charges, and you will have to make up any missed payments on the questioned amount. In either case, we will send you a statement of the amount you owe and the date it is due.
If you fail to pay the amount we think you owe, we may report you as delinquent. However, if our explanation does not satisfy you, and you write to us within ten days telling us you still refuse to pay, we must tell anyone we report you to that you have a question about your bill. And, we must tell you the name of anyone we reported you to. Upon settlement of the dispute, we must tell everyone we report you to that the matter has been settled.
If we don't follow these rules, we can't collect the first $50 of the questioned amount, even if your bill was correct.
SPECIAL RULES FOR CREDIT CARD PURCHASES
If you have a problem with the quality of property or services you purchased with a credit card, and you have tried in good faith to correct the problem with the merchant, you may have the right not to pay the remaining amount due on the property or services.
There are two limitations on this right: (a) You must have made the purchase in your home state or if not, within 100 miles of your current mailing address.
(b) The purchase price must have been more than $50.
These limitations do not apply if we own or operate the merchant, or if we mailed you the advertisement for the property or services. HSBC Card Services Inc. and/or HSBC Card Services (II) Inc. provide processing services for HSBC Bank Nevada, N.A. You may write to us at the address shown on your billing statement or HSBC Bank Nevada, N.A., 1111 Town Center Drive, Las Vegas, Nevada 89144.
Orchard Bank, Household MasterCard and HSBC credit cards are issued by HSBC Bank Nevada, N.A. in Las Vegas, Nevada and serviced by its affiliates HSBC Card Services Inc. and/or HSBC Card Services (II) Inc. Not available to those consumers residing outside the United States. Offer void for all existing Household Bank and Orchard Bank MasterCard Cardmembers.
Important Information
To receive, view, and save disclosures and Account Information electronically, you must have a personal computer equipped with Netscape 4.0, Microsoft Explorer 4.0 or AOL 5.0 or later, and either a printer, a hard drive, or other storage device. You must also have a valid email address.
As paperless communication options become available, our cardholders will be able to choose which communications to receive electronically, and which to receive via standard mail. We will notify you in advance of sending such electronic disclosures and Account Information.
You must notify us if your email address changes in order to continue receiving disclosures and Account Information electronically.
You may withdraw your consent to receive disclosures and Account Information electronically at any time. However, if you withdraw your consent, future disclosures and Account Information will be sent via U.S. mail.
You have the option to request any information that we have provided electronically in paper form.
To notify us of your new email address, withdraw your consent, or to request a disclosure or Account Information in paper form, please contact us by calling the phone number on the back of your credit card or write us at Bankcard Services, P.O. Box 80084, Salinas, CA 93912-0084.
Electronic Agreement:
I agree to receive disclosures and other Account Information electronically. I confirm that I have the software and computer equipment that satisfies the requirement above and that I will download or print the disclosures and other card related communications for my records. Additionally, by clicking the YES button, I acknowledge that I am providing my consent to receive electronic communications
Terms and ConditionsAnnual Percentage Rate (APR) for Purchases Variable Customary APR: 14.90%1 will apply.
Minimum Customary APR: 14.90%
Other APR's Variable Cash APR: 25.15%2 (Minimum Cash APR: 20.90%)
Variable Default APR: 30.49% (Minimum Default APR: 29.49%)
Variable Rate Information Your APRs may vary. The rates are determined
Is this credit card a good choice for me...?
Already. No. Things to look for when getting a card include: no annual fee, low FIXED APR. When I turned 18 I obviously didn't have credit either. So I ended up applying everywhere(which is bad for your credit) and eventually just applied to a credit card offer in the mail(When I was 19). It was a Chase card NO annual fee but the APR was a horrible 19.99% FIXED. I was approved for a $200 or $500 credit limit. Then I got a Cap 1 offer in the mail and thought well "Whats in my wallet?" lol so I was approved for that one at $500 for 19.99 FIXED. (The bad thing about Cap 1 is that they DO NOT report your credit limit, so your credit goes off the highest balance you had on the card.) The only reason I settled for those high rates was because I knew I needed to establish credit and eventually I could get the rates down. Then a year later I applied for a rewards card through my credit union and was approved for $500 at 7.9% FIXED!! So that was awesome. Then my boyfriend had to apply for a SONY card and since we like to see who has better credit I did too. Approved for $2000 at a whopping 14.99%(Not something any reasonable person would sign up for unless you are only using it to get the reward points and pay off the balance every month like we do.) Anyway, I am 21 now and the APR on my cards range from 7.9% Fixed to 9.99%Fixed. (Got Both CAP 1 and Chase to lower the APR) Oh and the credit limits are much higher. If you sign up for a crappy APR card just be sure to pay the balance off every month(just like you should with any card no matter the APR) Just be smart with your credit.
Reply:You can try applying for a poor credit credit card or a prepaid credit card, but have lousy aprs and high fees but if you have bad credit you don't have much of a choice.
Sources:
http://www.creditcardassociate...
http://www.creditcardassociate... Report It
Reply:Ask yourself why you need others to make decisions for you. If you can't handle credit... or even finding a suitable credit card on your own, then don't do it.
What would be best for you is to simply pay as you go. Once you have restored your credit and built up some savings then consider getting a credit card.
Reply:Bad credit problem can be caused due to a number of situations. The credit card choices available to bad credit people allow them to rebuild their credit history. Financial products that help bad credit people are prepaid credit cards or debit cards, secured bad credit cards, unsecured bad credit cards.
Prepaid or debit cards:
These are the easiest option available for bad credit people. There are no verifications, no credit checks, no employment requirements, and the approval is instant. All they have to do is to deposit a money and a prepaid card is issued. This card has the borrowing or buying capacity equivalent to the funds deposited. The good thing with prepaid credit card is that it promotes financial discipline. Some prepaid card issuers report to various credit rating agencies, thus it helps in rebuilding your credit history. Apply online at: http://www.credit-card-gallery.com/PrePa...
Reply:i think you can do better. Go to creditcard.com they have a section on all the cards that specialize in bad credit. Read them over and choose what is best for you. If you can improve your credit in the mean time by paying down outstanding debts, or perhaps get on someone elses credit card as an authorized user it would make your life much easier. Avoid paying just the minimum on your outstanding cards.
Reply:It's horrible! ~
The best way to get a credit card, get on a second card of someone that has decent credit, then use it and pay it off every month. Soon you'll get offers for cards of your own. No annual charge, no deposit, none of the rest of that crap.
BUT you have to be responsible. And need to know someone who believes in you.
Reply:Wow, too long to read everything, but my husband got a secured Orchard card.
They are great way to establish credit. This card has boosted his credit to 635 from a 580 in about 6 months, needless to say he also pays his car payment on time. But he has several items in collection (when he allowed his sister to obtain 2 credit cards and 1 personal loan in his name, but she never paid them.) It was hard for his to get any kind of credit cards. So he put down $500.00 and that has been a very good card. It is a HSBC credit card, they are a pretty good bank!
Reply:NO NO NO! I had them when I was trying to rebuild my credit, bad idea.
If I knew then what I know now.....If you are trying to rebuild your credit, get a secured credit card from an actual bank.
200 min security deposit
35 dollar annual fee
Variable Rate Information Your APRs may vary. The rates are determined monthly by adding the Index (described below) and:
6.65% ("Spread") for the Customary APR for credit card purchases.
16.90% ("Spread") for the Cash APR for cash advances, including balance transfers, if applicable, and cash advances made by credit card check.
22.24% ("Spread") for the Default APR.
For each billing cycle, the Index is determined in the month prior to the month in which the billing cycle ends. In that prior month, the highest (U.S.) "Prime Rate" published in the Money Rates Table of The Wall Street Journal is selected (the "Index"). If the Index has changed, the new variable rates will take effect with the billing cycle that ends on or after the first day of the month following the Index change.
Grace Period for Repayment of Balances for Purchases You have 25 days from the date of the periodic statement to avoid a Finance Charge on new credit card purchases, provided you paid your previous balance in full.
Method of Computing Balance for Purchases Average Daily Balance (including new purchases).
Annual Fee $35 per year
Minimum Finance Charge $1.00 for each billing cycle in which a Periodic Finance Charge is payable.
Foreign Transaction Fee Finance Charge 1% of the U.S. dollar amount will apply to transactions made in a foreign currency.
Cash Advance Fee:$5 or 5% on all cash advances, whichever is greater; unless otherwise disclosed. Finance Charges accrue from the date of transaction. Cash advances will be limited. Your cash advance limit is disclosed on your billing statement. Late Payment Fee: The Late Payment Fee will vary based on the amount of your outstanding balance on your Payment Due Date, and will be: $30 if your balance is more than $0 up to and including $1000; or $35 if your balance is greater than $1000. Overlimit Fee: $30. Accessing the full amount or most of your available credit may result in an overlimit fee. Credit Limit Increase (CLI) Fee: If requested and approved, a CLI fee of up to $50% of the CLI may be charged to your Account, depending on your creditworthiness. Closed Account Service Fee: $3.50 per month on closed accounts with a debit balance.
The variable Customary APR will apply to credit card purchases.
The variable Cash APR will apply to cash advances, including balance transfers, if available, and cash advances made by credit card check.
If at any time your Account is subject to the Customary and/or Cash APRs, and you fail to make at least your Minimum Payment in time to be credited to your Account by the Payment Due Date, or your Account exceeds your credit limit, your entire Account balance will increase to the Default APR.
Note: The Orchard Bank Secured MasterCard requires a minimum deposit of $200 for a minimum $200 line of credit. For more information on the Orchard Bank Secured MasterCard, see our Secured Card FAQs.
At our discretion, payments are generally applied to interest, fees, and then principal balances. We apply your payments to lower APR balances before higher APR balances. The application of payments is subject to change at any time, without notice.
IMPORTANT INFORMATION
There is a maximum of two (2) Accounts issued by HSBC Bank Nevada, N.A. per customer.
If within 90 days of your Account open date, you decide you do not want the account, you can call the customer service number provided on the back of your card to cancel. Any fees, if assessed, will be reversed at no cost to you if you have not used the card.
IMPORTANT INFORMATION ABOUT PROCEDURES FOR OPENING A NEW ACCOUNT
To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an Account. What this means for you: When you open an Account, we will ask you for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver's license or other identifying documents.
Notice to California Residents:
Except otherwise limited by applicable law, we may provide credit information about your account to our affiliates from time to time. This information may be used to qualify you for other credit offers. Married persons may apply for a separate account.
Notice to New York Residents:
Consumer reports may be requested in connection with the processing of this application and any resulting account. Upon your request, we will inform you of the names and addresses of any consumer reporting agencies which have provided us with such reports.
Notice to Ohio Residents:
The Ohio laws against discrimination require that all creditors make credit equally available to all creditworthy customers, and that credit reporting agencies maintain separate credit histories on each individual upon request. The Ohio Civil Rights Commission administers compliance with the law.
Notice to Married Wisconsin Residents:
No agreement, court order, or individual statement applying to marital property will adversely affect a creditor's interests unless prior to the time credit is granted the creditor is furnished with a copy of the agreement, court order, or statement, or has actual knowledge of the adverse provision. You must indicate your marital status for this application to be processed.
INTEREST RATES AND FINANCE CHARGES
Interest Rates
The APRs on your Account are variable rates and are determined by adding a specified amount ("Spread") to an Index (described below). The APR is divided by 365 and rounded to the next highest hundred thousandth of a percentage point to determine your Daily Periodic Rate. The Daily Periodic Rate is used to determine the amount of Periodic Finance Charges (see Finance Charges).
Monthly Index For each billing cycle, the Index is determined in the month prior to the month in which the billing cycle ends. In that prior month, the highest (U.S.) "Prime Rate" published in the Money Rates table of The Wall Street Journal is selected (the "Index"). If the Index has changed, the new variable rates will take effect with the billing cycle that ends on or after the first day of the month following the Index change.
An increase in the Index will increase your applicable Daily Periodic Rates which may increase the Finance Charge due on your Account and may increase the Minimum Payment and Current Payment Due. Each time any APR changes, we will apply it to any existing balances, excluding any fixed rate Promotional or Introductory APR.
Purchase APR Your variable Customary APR applies to credit card purchases. The Daily Periodic Rate is based on 1/365th of the Index plus 6.65% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .04082% (corresponding 14.90% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .04082% (corresponding 14.90% ANNUAL PERCENTAGE RATE).
Cash APR Your variable Cash APR applies to cash advances, including balance transfers, if available, and cash advances made by credit card check. The Daily Periodic Rate is based on 1/365th of the Index plus 16.90% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .06890% (corresponding 25.15% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .05726% (corresponding 20.90% ANNUAL PERCENTAGE RATE).
If at any time your Account is subject to the Customary and/or Cash APRs, and you fail to make at least your Minimum Payment in time to be credited to your Account by the Payment Due Date, or your Account exceeds your credit limit, your entire Account balance will increase to the variable Default APR. At our discretion, your Account may return to the Customary APR after five consecutive months of on-time payments of at least the Current Payment Due, without exceeding your credit limit.
Default APR The Daily Periodic Rate for the variable Default APR is based on 1/365th of the Index plus 22.24% ("Spread"). For example, for billing cycles ending 5/17/07, the rate of FINANCE CHARGE would have been a Daily Periodic Rate of .08353% (corresponding 30.49% ANNUAL PERCENTAGE RATE). The minimum rate of FINANCE CHARGE is a Daily Periodic Rate of .08079% (corresponding 29.49% ANNUAL PERCENTAGE RATE).
Finance Charges
Finance Charges are the total of the greater of (a) Minimum Finance Charge, or (b) periodic Finance Charges, and any applicable (c) Cash Advance Fee Finance Charges, (d) Foreign Transaction Fee Finance Charge, (e) Credit Limit Increase Fee Finance Charge, (f) Closed Account Service Fee Finance Charges, and (g) Processing Fee Finance Charge.
(a) Minimum Finance Charge. A Finance Charge that is assessed in lieu of a lesser periodic Finance Charge in any billing cycle in which a periodic Finance Charge is payable. This fee is $1.00.
(b) Periodic Finance Charges. Periodic Finance Charges are computed by multiplying the Average Daily Balance for each category of transactions shown on your statement (e.g., purchases, balance transfers, cash advances) by the applicable Daily Periodic Rate and then multiplying the result by the number of days in the billing cycle. To calculate the Daily Balances, we take the beginning debit balance for each category of transactions each day, add any new transactions, any previous day's periodic Finance Charges, any assessed fees and charges, and subtract any payments and/or credits. If a debit transaction posts after the beginning of your billing cycle, but the transaction occurred prior to the beginning of your billing cycle, the applicable Daily Balance will be adjusted to include the transaction amount and any previous day's periodic Finance Charges for each day the transaction amount was outstanding prior to the beginning of the current billing cycle. Then, for each transaction category, we add the Daily Balances for the billing cycle together and divide the total by the number of days in the billing cycle. This is the Average Daily Balance for each transaction category. (1) Credit Card Purchases. Periodic Finance Charges begin to accrue on the date of the transaction and continue to accrue until payment in full is credited to your Account. However, there is a 25 day Grace Period on new credit card purchases. That means, if the New Balance shown on your last statement is paid in full by the Payment Due Date for that statement, periodic Finance Charges will not be imposed on new credit card purchases, provided the New Balance for the current billing cycle is paid in full by the Payment Due Date for that billing cycle. If, however, the New Balance is not paid in full by the Payment Due Date for the immediately preceding billing cycle, periodic Finance Charges will be incurred on new credit card purchases (i.e., purchases appearing for the first time in the current cycle) from the date of the transaction and on the previously billed but unpaid credit card purchases form the first day of the current cycle.
(2) Cash Advances (including balance transfer and credit card checks). Periodic Finance Charges begin to accrue on the date of the transaction and continue to accrue until payment in full is credited to your Account. There is no Grace Period on cash advances.
Periodic Finance Charges will be calculated using the Daily Periodic Rate in effect on the statement closing date.
(c) Cash Advance Fee Finance Charges. Cash advances include all advances to get cash over the counter, through an ATM, balance transfers (if available), credit card checks, or other "cash-like" transactions (such as purchasing a money order, traveler's check, casino or betting chip, or a lottery ticket) as determined by us. A Finance Charge will be computed on the amount of each cash advance as of the date of the transaction. The Cash Advance Fee FINANCE CHARGE for all cash advances is 5%, subject to a minimum FINANCE CHARGE of $5, unless otherwise disclosed.
(d) Foreign Transaction Fee Finance Charge. A Foreign Transaction Fee FINANCE CHARGE equal to 1% of the U.S. dollar amount is assessed on transactions made in a foreign currency, as of the transaction date.
(e) Credit Limit Increase Fee Finance Charge. If you request and are approved for a credit limit increase ("CLI"), a CLI Fee FINANCE CHARGE of up to 50% of the CLI may be assessed to your Account, depending on your creditworthiness.
(f) Closed Account Service Fee Finance Charge. A $3.50 per month FINANCE CHARGE is assessed to the Account for each billing cycle whenever that Account is closed with a debit balance.
The application of any Finance Charge other than a periodic Finance Charge may cause the APR on the billing statement on which this Finance Charge first appears to exceed the Nominal APR.
ACCOUNT FEES
Annual Fee/Periodic Membership Fee
Your Account is subject to a $35 Annual Fee for each year your Account is open or closed with a balance. If you close your Account within the first 90 days your Account is open, the Annual Fee is refundable so long as you have not used the Account.
Late Payment Fee
A Late Payment Fee is assessed for each billing cycle in which at least the Minimum Payment, and any amount past due, is not paid in time to be credited to the Account by the Payment Due Date. The Late Payment Fee will vary based on the amount of your outstanding balance on your Payment Due Date, or during the period up to 5 days after your Payment Due Date, as determined by us, and will be: $30 if your balance is more than $0 up to and including $1000; or $35 if your balance is greater than $1000.
Overlimit Fee
An Overlimit Fee is assessed if your Account balance exceeds the applicable credit limit at any time during a billing cycle. We may impose this fee even if we authorize or impose any charges that cause your balance to exceed the credit limit. This fee is $30.
Other Fees and Charges
Returned Payment Fee
A Returned Payment Fee is assessed to your Account each time a payment check, automatic payment deduction, or other payment method is not honored or is returned unsatisfied by the bank or other financial institution. Any payment returned unsatisfied for any reason may be reposted to any type of transaction (i.e. cash advance, purchases, etc.) and Finance Charges may be reinstated back to the payment date at the APR being charged for that transaction. This fee is $30.
Returned Check Fee
A Returned Check Fee is assessed to the Account each time a credit card check, balance transfer check (if available), electronic check or other Account access device is returned unsatisfied by us for any reason. This fee is $30.
Check by Phone
A Check by Phone Fee may be assessed to the Account each time a payment is made by telephone, even if the payment is made by someone other than you. The amount of this fee will be disclosed at the time such payment is requested.
Stop Payment Fee
A Stop Payment Fee is added to the cash advance balance when a payment of a credit card check is stopped at your request. Payment may be stopped on a credit card check by notifying us in writing or by calling us at the telephone number listed on the Account billing statement, so long as such check has not already been processed. A stop payment request must include the check number, payee, amount and date of the credit card check on which payment is to be stopped. If a stop payment is requested by telephone, the call must be confirmed in writing within 14 days. A written stop payment will remain in effect for six months unless renewed in writing. This fee is $29.
Send stop payment requests to P.O. Box 81622, Salinas, CA 93912-1622.
Research Fee
A $7 Research Fee is assessed to the Account for each sales slip copy, $3 for each statement copy, and $10 for each application copy upon request.
ADDITIONAL TERMS
Arbitration
The Cardmember Agreement and Disclosure Statement ("Agreement") that you will receive with your card, if you are approved for credit, provides that certain disputes are subject to binding arbitration. Arbitration replaces the right to go to court, including the right to a jury and the right to participate in a class action or similar proceeding. Please read the "Arbitration" section of the Agreement carefully.
YOUR BILLING RIGHTS
What To Do If There's An Error In Your Bill
YOUR BILLING RIGHTS - KEEP THIS NOTICE FOR FUTURE USE
This notice contains important information about your rights and our responsibilities under the Fair Credit Billing Act.
NOTIFY US IN CASE OF ERRORS OR QUESTIONS ABOUT YOUR BILL
If you think your bill is wrong, or if you need more information about a transaction on your bill, write to us (on a separate sheet) at the address listed on your billing statement. Write us as soon as possible. We must hear from you no later than 60 days after we sent you the first bill on which the error or problem appeared. You can telephone us, but doing so will not preserve your rights.
Please include the following information in your letter:
Your name, account number and signature;
The dollar amount of the suspected error; and
Describe the error and explain, if you can, why you believe there is an error.
If you need more information, describe the item you are not sure about. If you have authorized us to pay your Account bill automatically from your savings or checking account, you can stop the payment on any amount you think is wrong. To stop the payment, your letter must reach us three business days before the automatic payment is scheduled to occur.
YOUR RIGHTS AND OUR RESPONSIBILITIES AFTER WE RECEIVE YOUR WRITTEN NOTICE:
We must acknowledge your letter within 30 days, unless we have corrected the error by then. Within 90 days, we must either correct the error or explain why we believe the bill was correct.
After we receive your letter, we cannot try to collect any amount you question, or report you as delinquent. We can continue to bill you for the amount you question, including Finance Charges, and we can apply any unpaid amount against your Credit Limit. You do not have to pay any questioned amount while we are investigating, but you are still obligated to pay the parts of your bill that are not in question.
If we find that we made a mistake on your bill, you will not have to pay any Finance Charges related to any questioned amount. If we didn't make a mistake, you may have to pay Finance Charges, and you will have to make up any missed payments on the questioned amount. In either case, we will send you a statement of the amount you owe and the date it is due.
If you fail to pay the amount we think you owe, we may report you as delinquent. However, if our explanation does not satisfy you, and you write to us within ten days telling us you still refuse to pay, we must tell anyone we report you to that you have a question about your bill. And, we must tell you the name of anyone we reported you to. Upon settlement of the dispute, we must tell everyone we report you to that the matter has been settled.
If we don't follow these rules, we can't collect the first $50 of the questioned amount, even if your bill was correct.
SPECIAL RULES FOR CREDIT CARD PURCHASES
If you have a problem with the quality of property or services you purchased with a credit card, and you have tried in good faith to correct the problem with the merchant, you may have the right not to pay the remaining amount due on the property or services.
There are two limitations on this right: (a) You must have made the purchase in your home state or if not, within 100 miles of your current mailing address.
(b) The purchase price must have been more than $50.
These limitations do not apply if we own or operate the merchant, or if we mailed you the advertisement for the property or services. HSBC Card Services Inc. and/or HSBC Card Services (II) Inc. provide processing services for HSBC Bank Nevada, N.A. You may write to us at the address shown on your billing statement or HSBC Bank Nevada, N.A., 1111 Town Center Drive, Las Vegas, Nevada 89144.
Orchard Bank, Household MasterCard and HSBC credit cards are issued by HSBC Bank Nevada, N.A. in Las Vegas, Nevada and serviced by its affiliates HSBC Card Services Inc. and/or HSBC Card Services (II) Inc. Not available to those consumers residing outside the United States. Offer void for all existing Household Bank and Orchard Bank MasterCard Cardmembers.
Important Information
To receive, view, and save disclosures and Account Information electronically, you must have a personal computer equipped with Netscape 4.0, Microsoft Explorer 4.0 or AOL 5.0 or later, and either a printer, a hard drive, or other storage device. You must also have a valid email address.
As paperless communication options become available, our cardholders will be able to choose which communications to receive electronically, and which to receive via standard mail. We will notify you in advance of sending such electronic disclosures and Account Information.
You must notify us if your email address changes in order to continue receiving disclosures and Account Information electronically.
You may withdraw your consent to receive disclosures and Account Information electronically at any time. However, if you withdraw your consent, future disclosures and Account Information will be sent via U.S. mail.
You have the option to request any information that we have provided electronically in paper form.
To notify us of your new email address, withdraw your consent, or to request a disclosure or Account Information in paper form, please contact us by calling the phone number on the back of your credit card or write us at Bankcard Services, P.O. Box 80084, Salinas, CA 93912-0084.
Electronic Agreement:
I agree to receive disclosures and other Account Information electronically. I confirm that I have the software and computer equipment that satisfies the requirement above and that I will download or print the disclosures and other card related communications for my records. Additionally, by clicking the YES button, I acknowledge that I am providing my consent to receive electronic communications
Terms and ConditionsAnnual Percentage Rate (APR) for Purchases Variable Customary APR: 14.90%1 will apply.
Minimum Customary APR: 14.90%
Other APR's Variable Cash APR: 25.15%2 (Minimum Cash APR: 20.90%)
Variable Default APR: 30.49% (Minimum Default APR: 29.49%)
Variable Rate Information Your APRs may vary. The rates are determined
Is this credit card a good choice for me...?
Already. No. Things to look for when getting a card include: no annual fee, low FIXED APR. When I turned 18 I obviously didn't have credit either. So I ended up applying everywhere(which is bad for your credit) and eventually just applied to a credit card offer in the mail(When I was 19). It was a Chase card NO annual fee but the APR was a horrible 19.99% FIXED. I was approved for a $200 or $500 credit limit. Then I got a Cap 1 offer in the mail and thought well "Whats in my wallet?" lol so I was approved for that one at $500 for 19.99 FIXED. (The bad thing about Cap 1 is that they DO NOT report your credit limit, so your credit goes off the highest balance you had on the card.) The only reason I settled for those high rates was because I knew I needed to establish credit and eventually I could get the rates down. Then a year later I applied for a rewards card through my credit union and was approved for $500 at 7.9% FIXED!! So that was awesome. Then my boyfriend had to apply for a SONY card and since we like to see who has better credit I did too. Approved for $2000 at a whopping 14.99%(Not something any reasonable person would sign up for unless you are only using it to get the reward points and pay off the balance every month like we do.) Anyway, I am 21 now and the APR on my cards range from 7.9% Fixed to 9.99%Fixed. (Got Both CAP 1 and Chase to lower the APR) Oh and the credit limits are much higher. If you sign up for a crappy APR card just be sure to pay the balance off every month(just like you should with any card no matter the APR) Just be smart with your credit.
Reply:You can try applying for a poor credit credit card or a prepaid credit card, but have lousy aprs and high fees but if you have bad credit you don't have much of a choice.
Sources:
http://www.creditcardassociate...
http://www.creditcardassociate... Report It
Reply:Ask yourself why you need others to make decisions for you. If you can't handle credit... or even finding a suitable credit card on your own, then don't do it.
What would be best for you is to simply pay as you go. Once you have restored your credit and built up some savings then consider getting a credit card.
Reply:Bad credit problem can be caused due to a number of situations. The credit card choices available to bad credit people allow them to rebuild their credit history. Financial products that help bad credit people are prepaid credit cards or debit cards, secured bad credit cards, unsecured bad credit cards.
Prepaid or debit cards:
These are the easiest option available for bad credit people. There are no verifications, no credit checks, no employment requirements, and the approval is instant. All they have to do is to deposit a money and a prepaid card is issued. This card has the borrowing or buying capacity equivalent to the funds deposited. The good thing with prepaid credit card is that it promotes financial discipline. Some prepaid card issuers report to various credit rating agencies, thus it helps in rebuilding your credit history. Apply online at: http://www.credit-card-gallery.com/PrePa...
Reply:i think you can do better. Go to creditcard.com they have a section on all the cards that specialize in bad credit. Read them over and choose what is best for you. If you can improve your credit in the mean time by paying down outstanding debts, or perhaps get on someone elses credit card as an authorized user it would make your life much easier. Avoid paying just the minimum on your outstanding cards.
Reply:It's horrible! ~
The best way to get a credit card, get on a second card of someone that has decent credit, then use it and pay it off every month. Soon you'll get offers for cards of your own. No annual charge, no deposit, none of the rest of that crap.
BUT you have to be responsible. And need to know someone who believes in you.
Reply:Wow, too long to read everything, but my husband got a secured Orchard card.
They are great way to establish credit. This card has boosted his credit to 635 from a 580 in about 6 months, needless to say he also pays his car payment on time. But he has several items in collection (when he allowed his sister to obtain 2 credit cards and 1 personal loan in his name, but she never paid them.) It was hard for his to get any kind of credit cards. So he put down $500.00 and that has been a very good card. It is a HSBC credit card, they are a pretty good bank!
Reply:NO NO NO! I had them when I was trying to rebuild my credit, bad idea.
If I knew then what I know now.....If you are trying to rebuild your credit, get a secured credit card from an actual bank.
I Have a Problem with My PHP?
I saw an error on my php. When I type php -v, I saw this message:
PHP 5.2.5 %26lt;cli%26gt; %26lt;built: Nov 8 2007 23:18:51%26gt;
Copyright %26lt;c%26gt; 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright %26lt;c%26gt; 1998-2007 Zend Technologies
Error in my_thread_gobal_end(); 1 threads didn't exit
when I was using php with IIS 5.1 on xp, I saw the same error.
So what should I do?
I Have a Problem with My PHP?
the CLI settings have nothing to do with the http settings. It looks like you are using a php.ini configured for http, specifically IIS, and are running the command line version of php with it. you can't do both. download a new php.ini for your cli environment.
if you are getting the same error in your http server then do not use the cgi version. instead, use the recommended settings for your specific server environment located in the installation files of your php bundle.
PHP 5.2.5 %26lt;cli%26gt; %26lt;built: Nov 8 2007 23:18:51%26gt;
Copyright %26lt;c%26gt; 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright %26lt;c%26gt; 1998-2007 Zend Technologies
Error in my_thread_gobal_end(); 1 threads didn't exit
when I was using php with IIS 5.1 on xp, I saw the same error.
So what should I do?
I Have a Problem with My PHP?
the CLI settings have nothing to do with the http settings. It looks like you are using a php.ini configured for http, specifically IIS, and are running the command line version of php with it. you can't do both. download a new php.ini for your cli environment.
if you are getting the same error in your http server then do not use the cgi version. instead, use the recommended settings for your specific server environment located in the installation files of your php bundle.
Php-gd installed but not working in CentOS 5?
I keep getting this error when doing php -v, pls help as I also cannot see my gd info in phpinfo. I saw somewhere that I might need to recomplie php with gd option but will that affect my current php settings? Do I need to backup php.ini before doing recomplie, pls kindly list the steps. Much appreciated. :)
[root@server ~]# php -v
PHP Warning: PHP Startup: gd: Unable to initialize module
Module compiled with module API=20050922, debug=0, thread-safety=0
PHP compiled with module API=20060613, debug=0, thread-safety=0
These options need to match
in Unknown on line 0
PHP 5.2.3 (cli) (built: Jul 2 2007 15:08:13)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Php-gd installed but not working in CentOS 5?
Try running this in a .php file to see if the gd is loading properly.
This should dump the gd variables.
%26lt;?php
var_dump(gd_info());
?%26gt;
You could also check to see if the gd extension is uncommented in the php.ini file
;comments in php.ini are semicolon
It's extension=php_gd2.dll for php5
If you need to recompile just save php.ini (if you've made changes like virtualhosts or basic settings)
hope that helps
[root@server ~]# php -v
PHP Warning: PHP Startup: gd: Unable to initialize module
Module compiled with module API=20050922, debug=0, thread-safety=0
PHP compiled with module API=20060613, debug=0, thread-safety=0
These options need to match
in Unknown on line 0
PHP 5.2.3 (cli) (built: Jul 2 2007 15:08:13)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Php-gd installed but not working in CentOS 5?
Try running this in a .php file to see if the gd is loading properly.
This should dump the gd variables.
%26lt;?php
var_dump(gd_info());
?%26gt;
You could also check to see if the gd extension is uncommented in the php.ini file
;comments in php.ini are semicolon
It's extension=php_gd2.dll for php5
If you need to recompile just save php.ini (if you've made changes like virtualhosts or basic settings)
hope that helps
Get rid of errorsafe?
Logfile of HijackThis v1.99.1
Scan saved at 4:31:48 PM, on 11/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MSMPSVC.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr...
C:\Program Files\Nikon\PictureProject\NkbMonitor.ex...
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray...
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpEng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defa...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defa...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt....
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt....
O3 - Toolbar: %26amp;Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [YCentral] C:\Program Files\Yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EX... -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr...
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.ex...
O8 - Extra context menu item: %26amp;Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E%26amp;xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCE...
O8 - Extra context menu item: Yahoo! %26amp;Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! %26amp;Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! %26amp;SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.D...
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .xfd: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/c...
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Se...
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.co...
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/hpfix/a...
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: InCD File System Service (InCDsrv) - Ahead Software - (no file)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSMPSVC - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MSMPSVC.exe" -n 4 (file missing)
O23 - Service: NkPtpEnumP2 - Unknown owner - C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe" -a -d="C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpip.dll (file missing)
Get rid of errorsafe?
Looks like your computer was attacked by a rogue security program... sux.
The easiest way would be to download and use Spybot: Search and Destroy and Ad-Aware SE Personal, which can be found with a search engine. If these don't fix the problem, use one of the programs found here:
http://www.remove-errorsafe.org/
or here:
http://en.wikipedia.org/wiki/Category:Sp...
Sorry all I could do was provide program names. I didn't see any obvious bad hijackthis settings..
anemone
Scan saved at 4:31:48 PM, on 11/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MSMPSVC.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr...
C:\Program Files\Nikon\PictureProject\NkbMonitor.ex...
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray...
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpEng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defa...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defa...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt....
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt....
O3 - Toolbar: %26amp;Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [YCentral] C:\Program Files\Yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EX... -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr...
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.ex...
O8 - Extra context menu item: %26amp;Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E%26amp;xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCE...
O8 - Extra context menu item: Yahoo! %26amp;Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! %26amp;Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! %26amp;SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.D...
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .xfd: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/c...
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Se...
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.co...
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/hpfix/a...
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: InCD File System Service (InCDsrv) - Ahead Software - (no file)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSMPSVC - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MSMPSVC.exe" -n 4 (file missing)
O23 - Service: NkPtpEnumP2 - Unknown owner - C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpEnum.exe" -a -d="C:\Program Files\Nikon\Wireless Camera Setup Utility\NkPtpip.dll (file missing)
Get rid of errorsafe?
Looks like your computer was attacked by a rogue security program... sux.
The easiest way would be to download and use Spybot: Search and Destroy and Ad-Aware SE Personal, which can be found with a search engine. If these don't fix the problem, use one of the programs found here:
http://www.remove-errorsafe.org/
or here:
http://en.wikipedia.org/wiki/Category:Sp...
Sorry all I could do was provide program names. I didn't see any obvious bad hijackthis settings..
anemone
What should i delete from hijack this?
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSv...
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Viewpoint\Common\ViewpointService....
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avc...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=5...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-409...
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22... /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22...
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [80d2ff35] rundll32.exe "C:\WINDOWS\system32\ggmrrshs.dll",b
O4 - HKLM\..\Run: [BM83e1cca9] Rundll32.exe "C:\WINDOWS\system32\xdnuxfvy.dll",s
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/testgen...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://atv.disney.go.com/global/download...
O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players/Pea...
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/Mat...
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSv...
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.E...
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22...
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService....
O24 - Desktop Component 0: (no name) - C:\Program Files\MSN\progyva.html
--
End of file - 9130 bytes
What should i delete from hijack this?
Have you tried going to one of those "hijackthis forums" where it's a whole message board dedicated to experts who volunteer to review your log for free? I think you would get more help there.
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSv...
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Viewpoint\Common\ViewpointService....
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avc...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=5...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-409...
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22... /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22...
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [80d2ff35] rundll32.exe "C:\WINDOWS\system32\ggmrrshs.dll",b
O4 - HKLM\..\Run: [BM83e1cca9] Rundll32.exe "C:\WINDOWS\system32\xdnuxfvy.dll",s
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/testgen...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://atv.disney.go.com/global/download...
O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players/Pea...
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/Mat...
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSv...
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.E...
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F22...
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService....
O24 - Desktop Component 0: (no name) - C:\Program Files\MSN\progyva.html
--
End of file - 9130 bytes
What should i delete from hijack this?
Have you tried going to one of those "hijackthis forums" where it's a whole message board dedicated to experts who volunteer to review your log for free? I think you would get more help there.
Can someone please look at my hijack this log and tell me whats wrong?
This summary is not available. Please
click here to view the post.
Hijack this log- whats wrong with my computer?
This summary is not available. Please
click here to view the post.
How do i get rid of Downloader.Exploit.64?
auto protect tells me i have Downloader.Exploit.64, i have followed the instructions on symantecs website but the trojan keeps coming back. Here is my hi jack this log, hopefully someone can help me.
Logfile of HijackThis v1.99.1
Scan saved at 8:21:12 PM, on 2/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom...
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv....
C:\Program Files\Viewpoint\Common\ViewpointService....
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch....
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.ex...
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Creative\MediaSource\Detector\CTDe...
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1....
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy....
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en%26amp;client=dell...
R1 - HKCU\Software\Microsoft\Windows\CurrentV... Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper...
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe...
O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm... -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.... -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [USBToolTip] "C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDe... /R
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Clean Access Agent.lnk = C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
O8 - Extra context menu item: E%26amp;xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCE...
O8 - Extra context menu item: Send to %26amp;Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.D...
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Face...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrow...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsof...
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedown...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.e...
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.ex...
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.ex...
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService....
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
How do i get rid of Downloader.Exploit.64?
omg!!! its trying to crash ur system!! back up all data on a removable disk and shut down immediately. u should obtain a copy of windows and reinstall it
Reply:hey you might want to give this a try go to Avast.com and download their virus and trojan remover tool ti works fast give a try i like it has work for me.
cyclamen
Logfile of HijackThis v1.99.1
Scan saved at 8:21:12 PM, on 2/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom...
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv....
C:\Program Files\Viewpoint\Common\ViewpointService....
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch....
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.ex...
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Creative\MediaSource\Detector\CTDe...
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1....
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy....
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=5...
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en%26amp;client=dell...
R1 - HKCU\Software\Microsoft\Windows\CurrentV... Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper...
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe...
O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm... -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.... -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [USBToolTip] "C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDe... /R
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Clean Access Agent.lnk = C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
O8 - Extra context menu item: E%26amp;xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCE...
O8 - Extra context menu item: Send to %26amp;Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.D...
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Face...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrow...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsof...
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedown...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.e...
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.ex...
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.ex...
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService....
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
How do i get rid of Downloader.Exploit.64?
omg!!! its trying to crash ur system!! back up all data on a removable disk and shut down immediately. u should obtain a copy of windows and reinstall it
Reply:hey you might want to give this a try go to Avast.com and download their virus and trojan remover tool ti works fast give a try i like it has work for me.
cyclamen
Subscribe to:
Posts (Atom)