IT Queries: Computer problems answered

I have run an antispyware and it has picked up: Trojan-Clicker hkey-current-user\\software\

\microsoft\\windows\\current version\\internet settings\\zonemap\\domains\\analcord.com
\\gooozle.bz/www
\\preferit-windows
Avast doesn’t pick these up.  What do you think

You almost certainly do have some sort of spyware infection and the spyware has changed settings in the Internet Explorer trusted sites zones. This allows the sites listed to get better access to your system.

This is one reason we suggest running Firefox, Opera or Safari in preference to Internet Explorer.

You’ll need to give your computer a good scan for spyware, encourage your office or household not to use IE and educate users on what websites they should avoid.

I am a windows XP SP2 user. Everytime on start up i get the following error message “windows cannot find KHATARNAK.EXE. Make sure you typed the name correctly and then try again. To search for a file, click the start button and then click search”.

Below this i get another dialogue box with the message “windows cannot find ‘c:\WINDOWS\inf\other.exe”. Make sure you typed the name correctly and then try again”

If i click ok or close this dialogue box i get one more dialogue box which says “could not run “c:\WINDOWS\inf\other.exe” specified in the registry” and on closing this another one which says “windows cannot find “c:\windows\system32\config\win.exe’ .make sure u type the name correctly and then try again”

On closing this my normal desktop screen appears. What is wrong ?? What is the solution ??

 What’s happening is Windows wants to open some programs when it starts.  It can’t find them so you are getting these errors.

The good news is these programs are spyware and viruses. What it seems has happened is you’ve been infected but the infection has been cleaned from the computer.  Whatever cleaned your infection, it didn’t remove some of the pointers to the problem.

To fix this, open the System Configuration tool and take the ticks off the startup options pointing to KHATARNAK.EXE and the other items that are coming up as “not found”.

It’s also a very good idea to scan your computer for other infections and change any important passwords such as banking details.

I am running Trend Micro Internet Security and get an unresolved problem TROJ_Generic.ADV Infected File in a file called keygen.exe. How can I resolve this?

Some files can’t be cleaned because they are in use when the scanner picks it up. You’ll need to start your computer in Safe Mode and run a scan while most services are dormant. We have instructions on starting your computer in Safe Mode in a previous answer.

Some anti-malware programs can’t run in Safe Mode, we’re not sure if this is the case with Trend Micro. If it is, then you should download and run the free X-Clean scanner and run that in Safe Mode.

The free X-Clean scanner will give you an indication if you have an infection. If you do, then it will be worthwhile running other malware tools such as Spybot Search and Destroy, Ad-aware and PC Tools’ Spyware Doctor.

It is also possible the warning is a false alarm. In our office we have a number of security tools that regularly get flagged as potential viruses or spyware. But it’s better to be safe than sorry.

everytime I open my internet explorer there is an error appear on the lower right corner of my monitor saying”System Messaged click here for details”. then when I click the message it automatically go to one site. what is the problem? is this a virus? thanks.

Unfortunately you probably are infected with something, follow our Removing a Trojan advice. If you have clicked for details and paid any money to these people then you should contact your credit card company. We’d also strongly recommend changing banking and other important passwords after your computer has been cleaned.

when i visit a website address, within 2 seconds of being in the homepage I am directed to another webpage full of advertising.

I cannot seem to visit the web address i actually want to view.

Why is this and what is causing this to happen? How can I prevent this happening in the future?

You have been infected with spyware. The specific type that’s causing this problem is known as a page hijacker.

Unfortunately a page hijacker indicates you are almost certainly infected with other spyware.

We have instructions on removing spyware but keep in mind your infection is probably quite severe and may require expert assistance and possibly even reformatting your computer.

We would urge to change any PINs and passwords you have used on this computer as they may have been compromised. Do not do this on the infected computer.

I have been blessed with an unsolicited message from url runonce.msn.com/runonce2.aspx relating to internet explorer 7. This site has not downloaded correctly and i am unable to get rid of the damm thing. I am running windows xp professional and the error message is as follows
Line 8
Char 5
Error not implemented
Code 0
Url runonce.msn.com/runonce 2 aspx

You can change the startup page by opening Internet Explorer, clicking Tools, Internet Options and changing the home page settings under the General tab.

However it sounds like you have a spyware infection. We’ve previously posted instructions on removing a Trojan.

Some of these spyware infections can be very difficult to remove, if you find it stubborn, you may want to contact our technicians.

Since my Grandchildren visited and downloaded music, I have been plagued by Pop-ups. What is the latest free program I can use to stop this nuisance.

Unfortunately you have a malware infection. Your computer has picked up a program that feeds adverts into your computer. The people who put this rubbish on computers deliberately prey on kids looking for free music.

We have instructions on removing this stuff in a previous post. Keep in mind it can be difficult to remove these infections so you may have to call a computer tech in to assist you.

We’d suggest setting up limited user profiles for your kids. We have instructions on doing this on our PC Rescue website.

I am getting a series of errors appears when I boot up my PC.
Error loading C:\\PROGRA~1\\MYWEBS~1\\bar\\5.bin\\MWSBAR.DLL

thanks - Grahame

You have some spyware on your computer, or at least the remnants of it. It sounds like the My Web Search program has been partially removed but Windows still wants to start it. The first step is to scan your computer for spyware.

Once you’ve cleared your computer of any spyware infection, you need to use the MSConfig function to check what’s starting up.

Spyware can be a difficult thing to remove, if you find you are stuck then call an experienced tech

The computer just closed to a blank screen with the message no signal detected. We are running XP. I updated Norton Antivirus and then tried to scan in case of a virus and the computer just goes to the blank screen with no signal detected

The “No Signal Detected” message means exactly that; the computer monitor isn’t getting a signal from the computer. Basically it means the computer is off or the cable to the monitor is disconnected.

Sometimes it means the computer’s graphic card has failed.

In your case, it means the computer is shutting down when you run Norton. This is serious.

Either Windows is crashing due to a memory problem or, more likely, you have an extremely serious spyware infection.

We’d strongly suggest you call out a service technician to have a look at your system.

MY PC IS SAYING \”VIRUS FOUND JS/DOWNLOAD AGENT\”
WHAT DO I DO?

I AM RUNNING WINDOWS XP HOME EDITION.

First, you turn off your caps lock key. Writing messages in capitals is not good form. Some tips for writing emails and Internet messages can be found at our PC Rescue website.

The message indicates a web site has attempted a “drive by download”, that is it’s tried to install some malware while a user was visiting the site.

The virus checker should have a “fix” or “delete” option. Do it.

If the message continues, it indicates you have a malware infection that keeps re-installing the agent. To remove this, follow our Removing a Trojan instructions.

Removing a persistent spyware infection can be a difficult, irritating job. You may need a computer tech to clean this for you. Make sure you back up all your important data before the tech arrives.