Jump to content


Photo

Bytes sent is more than bytes received II


  • This topic is locked This topic is locked
39 replies to this topic

#1 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 15 December 2011 - 01:23 AM

Old post goes here:
http://www.spywarein...though-in-idle/




The problem still exists though helper from here has state that my computer is clean from malware.
Here is some extra info i got, hope this can help you to sort out this problem.

Previously i had installed Avast internet security (trial). I noticed that there is a firewall statics show us how much bytes in and out.

Posted Image
The picture attached display two kinds of internet connections used. The first one, with more BYTES OUT, is connect to internet by using Broadband package I've signed up.


After 2200, I changed to another wifi connection (which provided by my school), green graph is active. Bytes in is more than bytes out. Is this condition considered as normal, and bytes sent is more than bytes received is abnormal?


Can you tell me more about the graph? the blue and green line is in big contrast after 2200...

#2 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 15 December 2011 - 01:45 AM

Bytes in more than bytes out is normal when you are browsing.

Bytes out more than bytes in would only happen if you are uploading files or a lot of data.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#3 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 15 December 2011 - 02:37 AM

Bytes in more than bytes out is normal when you are browsing.

Bytes out more than bytes in would only happen if you are uploading files or a lot of data.




Dear CNM,
No, no files was uploading during that period....

#4 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 15 December 2011 - 01:11 PM

It could also happen if the PC is remotely connected to another PC - for instance, for work. If using VPN or a program such as PcAnywhere.

Since your WiFi connection works more normally why not just stick to that.

You can go to Control Panel > Network and Internet > Network and Sharing Center and explore a bit to see all your connections.

I'm moving this thread to PC Troubleshooting since we were unable to find any malware.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#5 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 15 December 2011 - 02:51 PM

wifi connection provided by my school is very unstable, sometimes even cant connect at all. That's why I signed up Broadband.

#6 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 22 December 2011 - 01:56 AM

We can look at the internet services and files.

Please download Farbar Service Scanner and run it on the computer with the issue.
  • Check "Include All Files" option.
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#7 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 12 January 2012 - 03:37 PM

Due to the lack of feedback this Topic is closed.

[reopened]
Everyone else please begin a New Topic.

Edited by cnm, 12 January 2012 - 08:36 PM.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#8 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 12 January 2012 - 08:35 PM

Reopened at request of topic owner.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#9 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 12 January 2012 - 08:52 PM

Dear CNM,
there is no includes all files this option.
Options available: Internet Services, Windows Firewall, System Restore, Security Center, Windows Update ONLY.


I scanned it with Internet Services checked.
Here is the log:






Farbar Service Scanner
Ran by User (administrator) on 13-01-2012 at 08:20:35
Microsoft Windows 7 Ultimate Service Pack 1 (X64)



Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

#10 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 12 January 2012 - 09:09 PM

Looks fine.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#11 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 12 January 2012 - 09:20 PM

I recommend that you register at http://www.pcguide.com/vb/index.php? and post a topic there in their Windows forum. Mention that SpywareInfo Forum found no malware.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#12 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 13 January 2012 - 10:34 AM

I will try my luck there.
I left my computer online whole day when i was at outside. and it took me, 3gb of internet usage!!!

#13 mjc

mjc

    Member

  • Emeritus
  • Pip
  • 36 posts

Posted 14 January 2012 - 03:13 AM

The only way to 'clean' this machine is going to be a total wipe of the hard drive and reinstalling a legitimate copy of Windows, or Linux distro.

Using a cracked/hacked/pirated version of Windows is the quickest way to end up in this situation.
“When men yield up the privilege of thinking, the last shadow of liberty quits the horizon.” - Thomas Paine

#14 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 14 January 2012 - 06:10 PM

Thanks, mjc. :hi:

superxc3:
Please download WVCheck from Artellos.com.
  • Double click WVCheck.exe. (If you downloaded the zipped version you will need to extract it.)
  • As indicated by the prompt, This program can take a while depending on your hard drive space.
  • Once the program is done, copy the contents of the notepad file as a reply.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#15 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 01:14 AM

Thanks mcj and cnm,

cnm, here s the log:


Windows Validation Check
Version: 1.9.12.5
Log Created On: 1358_16-01-2012
-----------------------

Windows Information
-----------------------
Windows Version: Windows 7 Service Pack 1
Windows Mode: Normal
Systemroot Path: C:\Windows

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates and install them automatically.
-----------------------
Last Success Time for Update Detection: 2012-01-16 05:28:19
Last Success Time for Update Download: 2012-01-14 02:44:18
Last Success Time for Update Installation: 2012-01-14 02:44:24


WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------


WVCheck's File Dump
-----------------------
C:\Program Files\Autodesk\Revit Architecture 2011\Program\Help\en-US\WBH\contexthelp\HCONTROL_REVIT_REMOVEWATCH.htm
Size: 403 bytes
Creation; 2/4/2011 0:48:54
Modification; 26/3/2010 17:14:36
MD5; be7c8a69f428fe905c0f9c056318f7a4
Matched: *removewat*
-----------------------
C:\Windows\System32\slwga.dll
Size: 14336 bytes
Creation; 7/7/2011 23:1:42
Modification; 20/11/2010 20:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\SysWOW64\slwga.dll
Size: 14336 bytes
Creation; 7/7/2011 23:1:42
Modification; 20/11/2010 20:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_5b467ba9bd0679bb\slwga.dll
Size: 14848 bytes
Creation; 14/7/2009 7:52:11
Modification; 14/7/2009 9:41:54
MD5; cc03cf9f24946dcbd70acb3e1b2f05bf
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_5b856235bcd79403\slwga.dll
Size: 15360 bytes
Creation; 27/2/2011 20:53:23
Modification; 21/12/2010 14:15:31
MD5; b7213e92b270761b88b313b62ba0e13b
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_5be2bf06d6168a3a\slwga.dll
Size: 15360 bytes
Creation; 27/2/2011 20:53:23
Modification; 21/12/2010 14:9:5
MD5; 86b7d4d7a87ecb9e6bded44c52c8d5d9
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_5d778f71b9f4fd55\slwga.dll
Size: 15360 bytes
Creation; 7/7/2011 23:1:48
Modification; 20/11/2010 21:27:26
MD5; b6d6886149573278cba6abd44c4317f5
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_ff27e02604a90885\slwga.dll
Size: 13824 bytes
Creation; 14/7/2009 7:36:22
Modification; 14/7/2009 9:16:15
MD5; 01fe4bdd0b47a7d8bf34d78d2bc23ddb
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_ff66c6b2047a22cd\slwga.dll
Size: 14336 bytes
Creation; 27/2/2011 20:53:23
Modification; 21/12/2010 13:38:16
MD5; 2008845b41d561fb77b77bbe0045099e
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_ffc423831db91904\slwga.dll
Size: 14336 bytes
Creation; 27/2/2011 20:53:23
Modification; 21/12/2010 13:29:6
MD5; 2332de32759ebcc691850e092b2564a6
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
Size: 14336 bytes
Creation; 7/7/2011 23:1:42
Modification; 20/11/2010 20:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------


WVCheck's Dir Dump
-----------------------
WVCheck found no known bad directories.


WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.


WVCheck's MBAM Quarantine Check
-----------------------
There were no bad files quarantined by MBAM.


WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.


WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - 5e0db2d8b2750543cd2ebb9ea8e6cdd3


-------- End of File, program close at 1401_16-01-2012 --------

#16 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 01:53 AM

I just updated malwarebytes, performed quick scan and 4files are infected.
I downloaded ByteOMeter to monitor bytes sent and received, btw, i uninstalled it just now.
I have no idea with sogou explorer.

I removed the four infected files and restart it already.
Here is the log from malwarebytes after removed the threats.


Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.16.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: USER-PC [administrator]

16/1/2012 2:38:51 PM
mbam-log-2012-01-16 (14-42-49).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 192123
Time elapsed: 3 minute(s), 26 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCU\Software\SogouExplorer (Adware.Sogou) -> No action taken.

Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|ByteOMeter (Trojan.AVKiller.Gen) -> Data: "C:\Program Files (x86)\ByteOMeter\ByteOMeter.exe" -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Program Files (x86)\ByteOMeter\ByteOMeter.exe (Trojan.AVKiller.Gen) -> No action taken.
C:\Users\User\AppData\Roaming\SogouExplorer\SogouExplorerSetup.exe (Adware.Sogou) -> No action taken.

(end)

#17 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 16 January 2012 - 12:43 PM

That rough check with WVCheck shows a valid Windows installation. The fact that you are able to get Windows updates means that if it is a pirated copy, it is good enough to fool Microsoft. What makes you think it is pirated? (as you said at http://www.pcguide.c...451&postcount=3)

Your MBAM log shows "No action taken". Please scan again. When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.

Then please do this:
Download this to your Desktop: Attached File  MBRWiz64.zip   139.13KB   44 downloads
Unzip it to your Desktop.
Do Start > Run, enter 'cmd'.
At the command prompt enter 'cd c:\users\User\Desktop'. (Space after cd).
Then enter 'MRBWiz64 /list > partition.txt'. (Space after MBRWiz64).
Attach partition.txt to your next reply.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#18 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 08:21 PM

My dad bought me this pc, I aint really sure about its spec.
I thought it is pirated window...

Here is first scan. Remove selected.
Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.16.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: XC [administrator]

17/1/2012 8:55:55 AM
mbam-log-2012-01-17 (08-55-55).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 191987
Time elapsed: 4 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCU\Software\SogouExplorer (Adware.Sogou) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\User\AppData\Roaming\SogouExplorer\SogouExplorerSetup.exe (Adware.Sogou) -> Quarantined and deleted successfully.

(end)

#19 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 08:22 PM

After restart, this is second quick scan.


Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.16.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: XC [administrator]

17/1/2012 9:14:05 AM
mbam-log-2012-01-17 (09-14-05).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 190964
Time elapsed: 4 minute(s), 37 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

#20 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 08:32 PM

MBRWiz - Version 3.0.46 beta for Windows
Copyright © 2002-2010 Roger Layton http://mbrwizard.com

Error 136: MBRWizard is unable to access the disk(s) with current permissions,
please restart as Administrator.



_________________________________________________________

Administrator problem? I have one account only in this pc.
(Previously I couldnt turn on FocalFilter due to administrator problem too. I have informed FocalFilter about this problem, it is solved by changing the level in UAC setting and:

>> Try going to the folder C:\windows\system32\drivers\etc, and
>> right-clicking on the file 'hosts' and choosing 'Properties'.
>> Then make sure that the Attribute named 'Read-only' is OFF, and hit OK.

#21 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 16 January 2012 - 08:54 PM

Navigate to C:\Windows\System32\cmd.exe.
Right click on cmd.exe and select 'Run as administrator'.
That will open a command window with elevated privileges and you should be able to run MBRWiz64.

At the command prompt enter 'cd c:\users\User\Desktop'. (Space after cd).
Then enter 'MRBWiz64 /list > partition.txt'. (Space after MBRWiz64).
Attach partition.txt to your next reply.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#22 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 16 January 2012 - 10:05 PM

The command you gave and the thing i downloaded is different, noted that yours MRB and the software is MBR.
I changed the file name from MBR to MRB.


Finally get this:


MBRWiz - Version 3.0.46 beta for Windows
Copyright © 2002-2010 Roger Layton http://mbrwizard.com

-----------------------------------------------------------------------------
Disk: 0 MBR/GPT: MBR
Size: 465.76GB CHS: 229504 224 19
Sectors: 976773168 Disk Signature: 0xC83BC83B
Partitions: 3 Partition Order: 1 2 3
Media Type: Fixed Interface: IDE
Description: WDC WD5000AADS-00S9B0
-----------------------------------------------------------------------------
Pos Idx Type/Name Size Boot Hide Start Sector Total Sectors DL Vol Label
--- --- --------- ---- ---- ---- -------------- -------------- -- -----------
1 1 07-NTFS 100M Yes No 2,048 204,800 <None>
2 2 07-NTFS 244G No No 206,848 511,795,200 C: <None>
3 3 07-NTFS 221G No No 512,002,048 464,769,024 D: <None>
-----------------------------------------------------------------------------

#23 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 16 January 2012 - 10:25 PM

Yep, my typo. Anyway that looks normal. Really I don't think we are going to solve this.

Do Start and enter 'Create a System Repair Disk'. See http://windows.micro...tem-repair-disc
Create the disk.

This shows the options you will have when you boot the disk: http://windows.micro...ns-in-Windows-7

I suggest doing the Startup Repair and the Memory Diagnostic.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#24 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 17 January 2012 - 12:14 AM

So I can perform Startup Repair and the Memory Diagnostic myself? Dont need any technician or installation cd?

#25 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 17 January 2012 - 12:17 AM

You just need the System Repair Disk, which you create yourself and then boot from.

If it can make a log, you can use its Command prompt to save a file to C:\

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#26 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 17 January 2012 - 03:43 AM

Will it erase anything from my computer? Means I dont need to do any backup, just system repair?

#27 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 17 January 2012 - 06:24 AM

I read the link you gave me, there is one sentence:

Note

If you're prompted to insert a Windows installation disc, it means that the files needed to create the system repair disc can't be found on your computer. Insert a Windows 7 installation disc.



I dont have Windows 7 installation disc.
Will this be prompted to me?

#28 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 17 January 2012 - 09:48 AM

Also, I want to install game from DVD. It takes very long time to load it.
And when I clicked the setup, after some time, it say that this is not a valid Win32 application.

My Pc is 64bit. Win32application means it must run under 32bit?
Other setup from different cd works fine.

#29 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 17 January 2012 - 12:56 PM

It is always good to have backups.
The Repair Disk is good to have in case your PC ever refuses to boot Windows. Keep it in a safe place. I don't think it will prompt you for an installation disk - try it and see.

Right-click the game installer. Select 'Troubleshoot compatibility'.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#30 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 18 January 2012 - 07:56 AM

Hi, I've created the disc.

To use the system repair disc

1. Insert the system repair disc into your CD or DVD drive.

2. Restart your computer using the computer's power button.

3. If prompted, press any key to start the computer from the system repair disc.

4. If your computer isn't configured to start from a CD or DVD, check the information that came with your computer. You might need to change your computer's BIOS settings.

5. Choose your language settings, and then click Next.

Select a recovery option, and then click Next.




But I cant go to Step 3. I restart it, nothing happen. WWhat's wrong?

#31 Fruss

Fruss

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 18 January 2012 - 10:01 AM

But I cant go to Step 3. I restart it, nothing happen. WWhat's wrong?


Nothing happens at all? Or does it just start up Windows? Is BIOS set up to boot from optical disk first?

#32 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 18 January 2012 - 12:09 PM

Fruss - please do not post help. We only allow our trained helpers to do that. You can sign up for training by replying to The Boot Camp here.

However Fruss is right. Please check your BIOS settings. CD needs to be first in the boot order.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#33 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 18 January 2012 - 03:34 PM

It just start up Windows. How to check BIOS set up.
I pressed DEL, prompted to a complicated screen. There is something call BIOS settings, when I get in, hmmm, how to check whether cd is in the boot order?

#34 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 18 January 2012 - 03:41 PM

Look in the different sections, usually in Advanced Features. What make of BIOS is it?

See http://www.google.co...EwIYQKbWt3vljGA

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#35 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 18 January 2012 - 09:39 PM

Thanks cnm.
I dont have chance to create log.
But everything seems fine. There's no errors detected for both Startup Repair and the Memory Diagnostic.

No errors have been found in Startup Repair,
*I left my desktop to perform Memory Diagnostic. I dint notice whether it has error or not.

#36 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 18 January 2012 - 09:41 PM

Is it my window is infected as mentioned in pcguide?
So the only way is format it?

#37 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 19 January 2012 - 12:25 PM

There is no evidence that your Windows is infected. But you can check by doing this:

Right click on c:\Windows\System32\cmd.exe. Select 'Run as administrator'.
In the command window, enter 'sfc /scannow'. It will look for any bad Windows files.

See http://pcsupport.abo...sfc-scannow.htm

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#38 superxc3

superxc3

    Member

  • Full Member
  • Pip
  • 78 posts

Posted 19 January 2012 - 06:40 PM

Dear cnm,


Verification 100% complete.
Windows Resource Protectioin did not find any intergrity violations.

Any way to solve my problem....? :mellow:

#39 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 19 January 2012 - 07:08 PM

Not that I know of, short of restoring your PC to original factory settings. What make and model is it?

We just can't find what is causing the problem.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#40 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,038 posts

Posted 30 January 2012 - 01:47 PM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE





2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button