Question about Computers & Internet

1 Answer

Trojan : Trojan.Win32.2771491971 Category : DiskFile File Name : C:\Program Files\TOSHIBA\TBS\RtDobGui.exe I was trying to use the free version of the BEST SPYWARE SCANNER and it showed up the result upwards.. Is there anyway you can assist me with this..

Posted by on

1 Answer

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that gotĀ 5 achievements.

    Champion:

    An expert who has answered 200 questions.

    Governor:

    An expert whose answer gotĀ voted for 20 times.

  • Expert
  • 218 Answers

Download super anti spyware free run that it will clean all spyware as for your virus/trogen download avast home free and run that issues will be all fixed hope this helps

Posted on Jul 12, 2010

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
a 6ya expert can help you resolve that issue over the phone in a minute or two.
best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
the service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
goodluck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

Win32


dllhost.exe (dllhost.exe error) Description: Dllhost.exe is a program which most likely arrived on your computer preinstalled, but there is also a virus / trojan under this same name. The actual disk location is also listed below, always verify where its located on your hard drive, as this makes sure it is not spyware or adware simply placed elsewhere on your computer, and using the same name in an attempt to fool you. This program is from Microsoft and its their DCOM software which is part of the operating system. The correct file location is shown below. Make sure you do not have a file under this name in a folder called "Wins" within the system32 folder, as that is a trojan and virus related file. The correct location for the system file (which is safe) is below. This software will appear in your startup as a service. This is a safe file and it is not considered to be virus or spyware related.

Apr 09, 2014 | Microsoft Computers & Internet

Tip

Trojan Horse Removal


A virus is program that has malicious content in it and replicates itself and a Trojan horse is program that will only work if the user executes it. Sometimes, a Trojan horse covers itself as a fake folder while in fact, it's an .exe file.
The good thing about Trojan horse is that it is not that hard to get rid of them. But the bad thing about Trojan horse is that it is a little bit difficult to find them.
Although, it does not corrupt files or delete data stored on your hard disk until you execute it. Once executed, it will allow the hackers to indentify your credit card number, social security number, bank account details or some other private information.
You can delete or remove the hidden Trojan horse with the help of antivirus software. Either, you can also try the manual process to delete it or you can follow these steps:
STEP 1 Open the System Information Utility (msinfo32.exe). You can find the System Information Utility by typing “msinfo32.exe” in ‘Run’. This program lists all the processes running on any Windows system, even those processes that are hidden from the task list. Now open your virus scanner and run the executable or .dll through it.
STEP 2 Open your antivirus software and run a virus scan. If you don't have a antivirus software installed, download AVG Anti-Virus Free Edition 7.5. And run a scan using it. After the scanning process is completed, delete the value that was detected from the registry (before doing this step, take a backup of the registry files):
A) Click ‘Start’ > ‘Run’.
B) Type "regedit".
C) Click "OK".
D) Go to the subkey:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices

E) Now delete any value from the right pane that was detected during the scan process.
F) Exit the Registry Editor.

on Mar 16, 2010 | Computers & Internet

1 Answer

I don't want Palladium on my computer and I can't delete it


Manual Removal procedure for Palladium Pro The first step you must take in order to remove Palladium Pro is to stop one of the following processes below. Only one of them will be running.
  • Palladium.exe
  • PalladiumPro.exe
  • Palladiumantivirus.exe
  • Z.exe
To Stop this process you can browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file.
The next step in Palladium Pro removal is to delete the following file:
Windows XP :
  • C:\Program Files\Palladium Pro\PalladiumPro.exe
  • C:\Documents and Settings\USER NAME\Application Data\Palladium.exe
  • C:\Documents and Settings\USER NAME\Application Data\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Palladium Pro.lnk
  • C:\Documents and Settings\USER NAME\Application Data\Roaming\Microsoft\Windows\Start Menu\Programs\Palladium Pro\Palladium Pro.lnk
  • C:\Program Files\Startup\Palladium Pro.lnk
Windows Vista / Windows 7 :
  • C:\Users\YOUR USER NAME\AppData\Palladium.exe
  • C:\Program Files (x86)\Palladium Pro\PalladiumPro.exe
  • C:\Users\YOUR USER NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Palladium Pro.lnk
  • C:\Users\YOUR USER NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Palladium Pro\Palladium Pro.lnk
  • C:\Program Files (x86)\Startup\Palladium Pro.lnk
  • C:\%AppData%\Z.exe
Once you have successfully deleted these traces, Palladium Pro should no longer be running in your machine and now you should run a complete virus scan for the system using Spyware Doctor with Antivirus. This will let you know whether you have been able to remove all the traces of Palladium Pro successfully and also whether there is any other threat still available in the system.
If you need advanced help or an expert we recommend www.onlinecomputerrepair.org
Palladium Pro Registry Removal Procedures Now that your system is free from the Palladium Pro file traces that have been mentioned above, it is time to get rid of the infected registry items.
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium Pro"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium Pro"
  • HKEY_CURRENT_USER\Software\Palladium Pro
It is important that you run a complete virus scan for your computer when you are done with the removal procedure to ensure maximum protection for the system. For that, we suggest you to run the scan with Spyware Doctor with Antivirus.
Palladium Pro Directories: XP
  • C:\Program Files\Palladium Pro\
  • UPDATED: We have a report of it being at C:\Windows\Palladium Pro for some users.
Windows 7 / Windows Vista
  • C:\Program Files (x86) \Palladium Pro
Or mail me googolplexcorporation@gmail.com we will remove it through remote desktop support

Jan 27, 2011 | Computers & Internet

1 Answer

Cant get automatic updates from mirosoft.cant down load .cant find rundill 32 exe.cant find help suport .


What is rundll32.exe? Is rundll32.exe spyware or a virus?
This program is part of Windows, and is used to run program code in DLL files as if they were within the actual program. However, many viruses also use this name or similar ones. This file is also commonly used by spyware to launch its own malicious code.
Note: The rundll32.exe file is located in the folder C:\Windows\System32. In other cases, rundll32.exe is a virus, spyware, trojan or worm!

If you don't have this file in System32 then you have other problems. Possibly a virus is onboard.

Oct 06, 2010 | HP Computers & Internet

1 Answer

Media buttons on toshiba p305D-s8828 not working. lights on/off have reinstalled TVAP no difference think a hardware problem


Hello,

1.Uninstall and reinstall TVAP so ButtonSetting.ini gets created.

2. Search for ButtonSetting.ini (will be in hidden directory) and copy into C:\Program Files\TOSHIBA\TBS

3.Open regedit

4.Navigate to HKLM\SOFTWARE\TOSHIBA\TBS

5.Change "Button Path" value data to: C:\Program Files\TOSHIBA\TBS\ButtonSetting.ini
6. REBOOT

Please let me know if you have any further questions or concerns

Thanks.

May 07, 2010 | Toshiba Satellite P305D-S8818 Notebook

1 Answer

Hi...my problem is that my folder in my MP3 all turn to .exe file that i cannot open it anymore..how can i get it back to original folder? i think its infected with trojan virus if im not mistaken..please...


I think you have a trojan or virus too.  So:

GETTING RID OF THE VIRUS:
Let's see if we can get rid of -or at least identify- the virus:
Download and install (all these are free):

Avira (antivirus- the free version is fine)
http://www.free-av.com/
MalwareBytes (anti-trojan and malware)
http://www.malwarebytes.org/
WinPatrol (detects programs adding themselves to startup)
http://www.winpatrol.com/

No anti-nastyware package is 100% perfect.  ALL antivirus programs, for example, miss some viruses that others detect.  The thing is, you can't run more than one antivirus program on your computer because they interfere with each other.  That said; the above 3 programs work well together; are pretty effective; and best of all are free.  It's what I use myself; and the programs all scored well in the 'best of 2009' stakes.  Next year, it'll probably be different programs, but these are good as of now.

Install the 3 programs; Update them with current virus info; run a complete system scan of everything.  Hopefully, that will get rid of the virus.  If it doesn't, post a comment back here and we'll try manual removal...but that can get complicated, so we'll try the easy way for now.

GETTING YOUR MUSIC BACK (NOTE: Get rid of the virus first or it will just rename them back):
It may or may not be possible to get your music back...it depends what the virus has done to them.  

If it's just renamed them, that's easy, so we'll test that first:
In Windows Explorer, find your MP3 folder.  Right-click on one and select rename.  Change the file from .exe to .mp3.  It'll come up with an "Are you sure you want to do this?" warning.  Yes, we're sure.
Then double-click on the newly-renamed mp3 file.  If your music player pops up and it plays the music file all the way through then that's great and all we have to do is rename them.  If you get 'file not recognised' or other serious errors, then come back here and post a comment and we'll  try to rescue them.  The worst case here is that the virus has not only renamed your music, but also turned it into an exe containing the virus; in which case it may be difficult or impossible to save them.  But we'll give it a go.

Assuming that the virus has only renamed your files, we need a program to rename them back.  This one is good (and free!):
http://www.bulkrenameutility.co.uk/Main_Intro.php.
Download and install it.  Open it.  Browse to your MP3 directory, and select all the exe files that you want to rename back to MP3.  (Click ONCE on the top one; hold the SHIFT key down and press the down arrow till you get to the bottom of the list).  I know the program looks fearsome, but don't worry, here's what we do:

In the part marked Extensions (11):
1) Select "Remove" from the drop-down
2) You'll see the "New Name" column turn green and it will show you a preview of the files with no .exe at the end.
3) Press the "Rename" button.  This will perform the action.
4) Select "Add" from the dropdown in Extensions (11)
5) Type mp3 in the box next to the dropdown
6) In the new name column, all the files will change to file.mp3
7) Press "Rename"
8) Repeat for all subdirectories

NOTE: If you're absolutely positive you have no other filetypes in your mp3 folder and subfolders (no album art, no playlists etc) then you can untick the "folders" and tick the "subfolders" boxes in the "Selections (12)" section; select the mp3s you want to change in the base directory and all the subfolders too.  The program will then go through the subfolders and change ALL of the files in one hit.  Personally, I'd do it subfolder by subfolder, so I could see the files being changed...you have to be very careful doing bulk actions with a program this powerful.

I hope that helps.  Good luck!  Post a comment here if you still have the virus; or if your test mp3 doesn't work and we'll se what can be done.

Mar 11, 2010 | Audio Players & Recorders

1 Answer

Zlob virus


I found this on the net, i hope this helps you out. It also says that this nasty virus is a tough one...and you still run the risk of ruining your info on the hard drive. Back-up critical info (Docs,Music, Game info etc)
And keep me posted on the results..i hope this helps you out! GOOD LUCK! 8-)


Step 1 : Use Windows File Search Tool to Find Zlob Path
  1. Go to Start > Search > All Files or Folders.
  2. In the "All or part of the the file name" section, type in "Zlob" file name(s).
  3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
  4. When Windows finishes your search, hover over the "In Folder" of "Zlob", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete Zlob in the following manual removal steps.

Step 2 : Use Windows Task Manager to Remove Zlob Processes
  1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
  2. Click on the "Image Name" button to search for "Zlob" process by name.
  3. Select the "Zlob" process and click on the "End Process" button to kill it.
  4. Remove the "Zlob" processes files:
  5. msmsgs.exe nvctrl.exe msmsgs.exe nvctrl.exe
    Read more about How to kill Zlob Processes

Step 3 : Use Registry Editor to Remove Zlob Registry Values
  1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
  2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
  3. To delete "Zlob" value, right-click on it and select the "Delete" option.
  4. Locate and delete "Zlob" registry entries:
  5. HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunRegSvr32=%System%msmsgs.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
    Read more about How to Remove Zlob Registry Entries

Step 4 : Use Windows Command Prompt to Unregister Zlob DLL Files
  1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
  2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the Zlob DLL file is located and press the "Enter" button on your keyboard. If you don't know where Zlob DLL file is located, use the "dir" command to display the directory's contents.
  3. To unregister "Zlob" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u Zlob.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
  4. Search and unregister "Zlob" DLL files:
  5. uimcu.dll antzozc.dll dtjby.dll


Step 5 : Detect and Delete Other Zlob Files
  1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
  2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
  3. To change directory, type in "cd name_of_the_folder".
  4. Once you have the file you're looking for type in "del name_of_the_file".
  5. To delete a file in folder, type in "del name_of_the_file".
  6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
  7. Select the "Zlob" process and click on the "End Process" button to kill it.
  8. Remove the "Zlob" processes files:
  9. uimcu.dll antzozc.dll dtjby.dll dumpserv.com zxserv0.com vnp7s.net Protect RSA ncompat.tlb msvol.tlb hp[X].tmp msmsgs.exe nvctrl.exe dumpserv.com zxserv0.com vnp7s.net %UserProfile%\Application Data\Microsoft\Protect %UserProfile%\Application Data\Microsoft\Crypto\RSA ncompat.tlb msvol.tlb hp[X].tmp

Jun 07, 2009 | Toshiba Satellite Pro L300 Notebook

1 Answer

Reset secure clock


Cause and Solution to Secure Clock Error

First thing you need to do is open up your task manager by clicking control alt delete.

Select the tab "processes." In the process tab you will see a list of programs that are currently running, if you locate a file called csrss.exe it could be a trojan virus that is blocking your subscription music from communicating with your computer properly. It also effects a lot other things including hardware, personal information, security, etc. but for this post we will keep it specificly on the secure clock error. This csrss.exe trojan/virus causes your computer's internal system to not function correctly including the secure clock.

NOW WAIT! There are two different csrss.exe files, a good one and a bad/trojan one. All windows computers have a csrss.exe file on them and this "good" csrss.exe file is need in order for your computer to run propertly so don't do anything with it until you determine if you have the "good" one or the "bad" one.

You must first determine whether the csrss.exe file that is running on your computer is the "good" one that ships with the computer (inside your systems32 folder) or whether you have the trojan/virus csrss.exe file infecting your computer and secure clock.

Since the systems32 program and the Trojan/virus are both name csrss.exe you must run a quick test to see if you have the bad one or the good one or both.

First locate all fo the csrss.exe files inside your "processes" tab inside task manager (you may have more then one). The way to tell if you have the trojan or "bad" csrss.exe is by right clicking on it and selecting "end task." If you have the "good" one then you should get a windows pop up message. If you you get the windows pop up message, do NOT "end" the task, just ex out or cancel out of it. You do not want to end the "good" csrss.exe file because it is needed in order for your computer to work properly. If you "end task" on the good csrss.exe file then your computer will instantly crash (since it is needed to run).

If when you right click on the csrss.exe file and select "end task" you do NOT get a windows pop up then you may very likely have the csrss.exe trojan virus. In addition to the right click test you may want to simply look at where this file is located. If it is in your systems folder it is the good one, if it is anywhere else it is propably the bad one.

The trojan/virsu version of this csrss.exe file interferes with many of the communication hardware,drivers, software, security, etc., including rhapsody and will prompt this secure clock error message.

The only way to remove this csrss.exe trojan is to perform a system recovery on your computer returning your computer back to the original manufacturers settings. There is no way to clean, delete or remove this file trojan, you must perform a complete clean of your system by doing a system recover.

If you cannont determine whether your csrss.exe file are good one or bad ones simply back up your files and software and do a system recovery anyway, your rhapsody and mp3 player will then work fine.

May 21, 2009 | Coby MP-705 Digital Media Player

1 Answer

Remove write protect on my usb flash drive


Hello,

you can try to remove the viru with malwarebytes and unlocker
http://www.malwarebytes.org/mbam.php and http://www.softpedia.com/get/System/System-Miscellaneous/Unlocker.shtml

Thanks

Mar 25, 2009 | Microsoft Windows XP Professional SP2 for...

1 Answer

Anti virus program isolated a virus in the system32.svc file


You may have the wrong name for this beast; it seems to be a trojan: svc.exe
Check this thread:
http://forums.techguy.org/malware-removal-hijackthis-logs/175631-svc-exe-trojan-hijackthis-log.html
Running Restore will only reinstall the virus according to this thread.  

Sep 08, 2008 | Acer Aspire 1640Z Notebook

Not finding what you are looking for?
Computers & Internet Logo

Related Topics:

286 people viewed this question

Ask a Question

Usually answered in minutes!

Top Computers & Internet Experts

Doctor PC
Doctor PC

Level 3 Expert

7733 Answers

kakima

Level 3 Expert

102366 Answers

David Payne
David Payne

Level 3 Expert

14161 Answers

Are you a Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...