PC- HP Pavillion a1440n
Memory- 2 G
Monitor- Samsung 19" Syncmaster 932BW
Graphics Card- ATI VisionTek X1300 512 MB
OS- Dual Xp\Vista home Premium ( have been using Vista only since I upgraded, haven’t used XP os in 2 years)

I always keep my pc clean of dust and regulary use Window Washer to keep the system clean.

Sequence of events:

3 months ago… Aquired hijacking virus along with a quarter of the screen size popup ad when surfing and also a virus that replaced every ad banner on every web site with ViMax male enhancement ads.

Tried repeated attempts with Spybot Search and Destroy which always worked for me for this kind of thing for years. It never found anything. Yes I kept it updated.

Tried several other popular freeware similar to spybot with failed attempts. No viruses were ever detected. I knew I had a bada$s virus at this point.

One Microsoft recommended free removal program was from K7 Computing. No luck there either, though I suspected this to be a troublesome program after I removed it from my program files like i did with every other program that didn’t work for me. Every so often afterwards, the K7 icon would show up on my desktop or on my Rocket Dock even after I deleted the icon.

2 Months ago:
I began to use software to clean my registry. It worked for its purpoe but never found or deleted my viruses.

1 month ago:
I began to wake up in the morning and the PC would be shut down even though I didn’t do it and I didn’t have it schedueled to do so. I thought it may have been my 3am automatic updates but quickly didmissed that because there weren’t always updates and it would always restart if there were. Now as time progressed, throughout the next few weeks the computer was hesitant to load up when I hit the power button. When this happened it would power off instantly when I touched the power button unlike normally a have to hold it for a few seconds. After a few attempts it would eventually load up.

The fan began to run louder than ever, so I attributed the non-startups as a result of overheating. I removed the heatsink and fan, dusted it back to new and added new silver thermal compound between the heatsink and Intel processor after cleaning the old stuff off. Now it was quiet as the day i bought the PC. No luck with the normal startups though. I had suspected the virus all along.

I finally found a solution to the virus. It was a program called Malwarebytes. It came recommended in forums and it worked! It found several viruses and trojans and removed them all. PC and internet were all back to normal and I was happy as could be…

The next morning after the fix I awoke to see an unfamiliar desktop which looked like a basic desktop when you first install windows. The recycling bin and two program icons which I don’t remember where the only thing there besides the basic vista background and the task bar…
In the taskbar a little notice popped up. It said I was logged onto a temporary account as my normal administrator account could not be loaded. I had left the PC on in its normal administrator account the night before. I had done nothing.
So I immediately checked to see if my files were still around and they were through Explorer. Turned off the power and figured on backing everything up when I got back from work. I know I’m an idiot for not doing it in the last 3 months.
Anyways, since that morning my PC has never come back on. I can power it up and sometimes I even hear the windows loading sounds through the speakers but not always. I know the pc recognizes devices because if I hear the loading sounds I can press the logoff button on my wireless keyboard and I hear the sound it makes as it logs off. Now it doesn’t always "boot up" but I know when it does because I’ll either A;hear the sounds B; unplug the monitor cable from the pc and the monitor recognizes it has lost signal or C; when I hit the power button I have to hold it as opposed to it shutting off immediately as I have described above.

I have tested the monitor with my laptop and it works fine. I have placed my original video card back in the pc and nothing different. So I’m sure the video card is not the problem. I have tested the two memory sticks individually and in different slots with no results. My most recent test was to Map Network Drives and try to access my pc through the laptop to recover the files. It recognizes my pc but says I’m not logged onto the Administraor account. The problem there is the last time I seen anything it said I was was logged onto temp account of some sort and I don’t know what it is called if anything at all.
No luck with anything.

So if anybody has a solution as to how I can recover my files before I take it to a specialist, please share your wisdom. Would I have better luck trying to connect to the pc directly with a cable? Or if this has happened to anyone else and knows what the actual issue here is, PLEASE tell me.

Sorry for the sup
Sorry for the super long post, but I wanted to be as thorough as possible. I really don’t think I have any more information to give, but if there are any questions, I’ll be checking the post regularly.

Thank You,
Drexyl

http://i210.photobucket.com/albums/bb22/htn1042/IMG_0775.jpg

its the light up keys above the keyboard, the play/pause work but the one next to the power button does not work and i need help programming. i think it involves going into the registry

Okay well my pc is having problems(details below) & i got some recomendations to do a registry clean. I have ccleaner, & i dont know if i should delete what it detects under the registry clean? Should I? Will anything bad happen to my pc? Thanks

Pc Details-
Okay, I close everything down, and then I go to Start, & click shut down, then that little window appears with the options of turn off, restart, & stand by. So I click Turn off, & once i do that, it goes to the shutting down screen-"Windows is logging off…"-like that. But then 5 second later, instead of turning off, it goes back to my desktop. Then I wait 15 more seconds & A "End Program Now" window appears with the progress bars for 1.5 seconds then dissapears. & then after all that my pc just freezes, everything is frozen, even ctrl alt dlte. Does Someone know what to Do?? Is it a registry problem? Should I try ccleaner, what?? I have to hold down the power button in the end to turn it off. So Any one???? –I Have Windows Xp Home

Hi. As the title says, my computer has been completely freezing just recently, and I have NFI what the problem is. I have ran alot of registry cleaners, and after fixing alot of stuff, there are no problems in those fields. But my computer still Freezes, forcing me to turn it off via holding the power button.

For the majority of times, it has frozen while I was playing WoW, or when I had a web browser open. When I turn it back on, it just sits there with a blank screen, and the power light is on. I have to hold the button and turn it off again, and then press it on again. If Im lucky, it starts up. When it does however, the light around the power button does something funny. I press it, it comes on for a second, then goes off for around 3 seconds, then it comes back on and the orange light underneath it begins to flash and it boots up. When it doesnt boot up when I hit the power button, the orange light doesnt flash at all.

Are there any other things which can cause PC’s to just freeze without warning. If so, please tell me and give me some solutions to possible problems. Any help would be appreciated

My computer is totally wacked. I turn it on and it says that there’s something wrong with the BIOS (I have no idea what that is) and to hit F2 to contine and I do but then something goes wrong and I get a blue screen so I restart my computer with the power button and it brings up the screen about the BIOS when it restarts but as its trying to do the next thing I hit F8 and then I choose to start windows normally and then my computer goes on. Once my computer is on its restarts randomly and is soslow. Also online, I can’t go to hardly any websites without this "Certificate error" thing. As far as virus protection I had Windows firewall and AVG (the free one) and this other lavasoft spyware thing. Well I ordered virus protection from Verizon but it wont download. It says to check my internet connection – which I’m pretty sure is fine. So, obviously there’s something wrong with my computer and so I download hijackthis. If someone could help me out I really appreciate it:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:57:11 PM, on 1/4/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\dumprep.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q404&bd=pavilion&pf=desktop
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://office.microsoft.com/search/redir.aspx?assetid=HA010936921033&CTT=1&Origin=EC010230001033&QueryID=ubtB1kD5H0&pid=CL100626971033&respos=2&rt=2
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 – Toolbar: HP view – {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} – c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 – Toolbar: Easy-WebPrint – {327C2873-E90D-4c37-AA9D-10AC9BABA46C} – C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 – HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 – HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 – HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 – HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 – HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 – HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 – HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 – HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 – HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 – HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 – HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 – HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 – HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 – Extra button: (no name) – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 – Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O16 – DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) – http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 – DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) – http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 – DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) – http://atv.disney.go.com/global/download/otoy/OTOYAX29b.cab
O16 – DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) – http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 – DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) – http://driveragent.com/files/driveragent.cab
O23 – Service: Apple Mobile Device – Apple, Inc. – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 – Service: Ati HotKey Poller – ATI Technologies Inc. – C:\WINDOWS\system32\Ati2evxx.exe
O23 – Service: iPod Service – Apple Inc. – C:\Program Files\iPod\bin\iPodService.exe
O23 – Service: Viewpoint Manager Service – Viewpoint Corporation – C:\Program Files\Viewpoint\Common\ViewpointService.exe


End of file – 6250 bytes