Computer help

[appurve]

Sorry if im posting in the wrong section but here it goes. Whenever i start my computer, My Documents folder also opens automatically. Pls can someone tell me how to solve this problem.

[Rex_Mundi_Incarnit]

Download this freeware tool and see what stuff is loading up when you boot into windows: http://www.windowsstartup.com/. Its very useful and tells you what is junk aswell.

[appurve]

Thanx Rex.What type of trance ur into?I like Psytrance. Any more info can u give cos im new to psytrance.

[Rex_Mundi_Incarnit]

Thanx Rex.What type of trance ur into?I like Psytrance. Any more info can u give cos im new to psytrance.

I'm sorry mate, never heard of psytrance. I'll check for some songs on the web to get an idea. I mostly listen to melodic / progressive trance, the stuff that's not always based on solely a bass beat in the background. I'm a big fan of DJ Tiësto too :cool: :grimreape

[appurve]

Well Rex i tried that software but it didnt help. My documents folder still opens up at start up. I hope some one can help me. Dj Tiesto ahmm wasn't he playing at the opening ceremony of olympics.

n Yea in Psytrance try GMS and Skazi.Hope u like psytrance.

[Todd The Kiwi]

I hope some one can help me
if you're running xp : start>run>type"msconfig" go to the startup tab and have a look if my documents is there
if it is go to general tab>choose selective startup>startup tab>select/unselect startup items>hit ok and choose whether to restart or not.when you do restart it'll ask you if you want it to display this box everytime,tick the box and hit "ok"

because this works for me doesn't mean it will for you
screenshots are welcome too...

[Rex_Mundi_Incarnit]

Well Rex i tried that software but it didnt help. My documents folder still opens up at start up. I hope some one can help me. Dj Tiesto ahmm wasn't he playing at the opening ceremony of olympics.

n Yea in Psytrance try GMS and Skazi.Hope u like psytrance.

That is really strange mate that it still opens at startup. You sure that not some other programme is doing this? Perhaps if you can post a list of all the apps that load on startup that would help. Also better check your pc for adware/spyware.

Tiesto sure was the DJ at the olympics :cool:I remember about psytrance, which i called Goa here. I haven't heard much of it and didn't quite like it, but i'll check out GMS and Skazi. I also figured that Goa originally comes from India, which surprised me :) Melodic trance, on the other hand, originates from Germany, Europe.

[appurve]

Ok guys it didn't help much.Im postin the pictures on my webpage hope this will give you some info so that you could help me. I tried help through google but it didn't solve problem. Spyware/Adware and Anti virus shows up nothing.The apps which load are Nokia software, Roxia cd burning app,bluetooth app and few more which u would see in the pics. But they are on my system for long time.And this problem started few days back.
http://www.geocities.com/amit_14_99/desktop/

Yea Psytrance is also called Goa Trance. I got into it just recently.In the start i didn't like it but couple of tracks changed my mind. Goa is a place in India where many people from other countries come, so its a happening place with lots of parties.

[Qaz]

It could be that C:\windows\$NtUninstallKB820291$\explorer.exe

[Rex_Mundi_Incarnit]

I agree, or this one: C:\windows\wt\wcmdmgrl.exe -launch, looks very dodgy. I suppose the rest you should be familiar with in reference to the kind of software you have installed. If you are unsure, press the "consult" button and see what Startup inspector for Windows says. Also, anything you think you dont need at startup, just get rid of it. :grimreape

[Tokelil]

http://www.2-spyware.com/file-wcmdmgrl-exe.html
http://computercops.biz/startuplist-4167.html

[appurve]

Ok guys thanx alot.Actually i wanted to delete this wild tangent which was related to this wcmdgrl.exe but there was no uninstall. So i went into safe mode deleted "wt" folder inside windows folder. Restarted, ran registry software,antivirus etc. Then i also unchecked C:\windows\$NtUninstallKB820291$\explorer.exe (it was related to norton to check something). So then i restarted again and guess what. No more My document folder popping up on start up.

:beer: for ya from me.......

[Todd The Kiwi]

Ok guys thanx alot


:beer: for ya from me.......

glad you got it sussed man:nervous:
your site looks interesting too
'crazy text' ha ha ha

[appurve]

glad you got it sussed man:nervous:
your site looks interesting too
'crazy text' ha ha ha


You know what mix of alcohol :beer: can make u do..!!! Made this thing bout 4 yrs back.

Always wanted to visit New Zealand.... :bandit:

[Todd The Kiwi]

You know what mix of alcohol :beer: can make u do..!!! Made this thing bout 4 yrs back.

Always wanted to visit New Zealand...

i think it looks choice mate
bring it on we have heaps of indians down here
curry is my favorite food too
in fact we had home made aloo tonight,yum:nervous:

my 'startup' if you wondered...

[appurve]

well aaloo is my favorite (i look like one too) LOL. Curry with Beer what combo. Maybe i open chain of food hotels or somethin become rich n retire early.(Day Dreamin like always).

[WHAT?]

OK, riddle me this ...
I have a fellow employee that uses a laptop. Now when he plugs into the office network AND launches ie, it takes down all connections to the internet on our network. Yes, he had no AV on it for a long time. Now it's been added, and scanned thoroughly. It found about 100 issues. But now it appears to be clean.
But once again, upon launching ie, it crashes all other connections to the great out-web.
Currently I'm going to be installing another browser on to his laptop just to see if that helps or tells me anything.

Could anyone tell me if they have ever seen this, or could throw me a bone as to where to search for a remedy.
I'll let you know the outcome of FF

[Tokelil]

Run Wireshark and create a log of what is happening. (Maybe compare to a "clean" machine log) Sounds like is either DoS or sending out malformed packets for some reason. (DoS probably because of malware. Malformed packets could come from a fucked driver or hardware)

Haven't really seem a machine like this myself, but at my work we have actually had kind of the same issue for a 3-4 days. Between ~08.00 and 16.00 some equipment was spamming the network (firewall was overloaded I think) and actually took down the network connection more or less for the whole university. Networking is not part of my work department, so don't know the details.

[WHAT?]

Thanks Toke.
I found FF to work better. Also found more viruses. The Symantec AV found 56 more, then 4 more upon each time I launched ie (not FF). I found a few other potential issues he had on the PC. Namely the log in was Administrator with no PSWD. He had the "enable third party extensions" checked in ie. No firewall enabled. Not sure he intentionally did either of those things though. I couldn't even see the setting of the FW because of the service it needs wasn't running correctly. Then it finally came up to see that it was disabled.
So with that behind me, I'm once again manually scanning, and so far it has found 13 more viruses, and counting.:shocked:
I'll end up doing what you suggest once finished. But as of now, it doesn't affect the whole network any longer. Shame on me for even testing that so soon:cross-eye :o :ermm:

[hedge]

Thanks Toke.
I found FF to work better. Also found more viruses. The Symantec AV found 56 more, then 4 more upon each time I launched ie (not FF). I found a few other potential issues he had on the PC. Namely the log in was Administrator with no PSWD. He had the "enable third party extensions" checked in ie. No firewall enabled. Not sure he intentionally did either of those things though. I couldn't even see the setting of the FW because of the service it needs wasn't running correctly. Then it finally came up to see that it was disabled.
So with that behind me, I'm once again manually scanning, and so far it has found 13 more viruses, and counting.:shocked:
I'll end up doing what you suggest once finished. But as of now, it doesn't affect the whole network any longer. Shame on me for even testing that so soon:cross-eye :o :ermm:
Yeah that sounds rather messed up, I'd say a clean install of Windows is less effort then trying to clean it.

[WHAT?]

Well, actually it's cleaning up quite nicely so far. A final thorough scan seems to show no signs of anything bad now.

My concern was the "kicking everybody out completely" thing... as long as this laptop was trying to access the internet. I guess it WAS hammering the firewall. I found so many different kinds of viruses from those scans. It was amazing. Hope this is a lesson to the owner of the business not to be cheap and cut corners. I case you are wondering... I was warning him for months. Talk about "I told you so".:silly: My notebook has AVAST on it since he wouldn't fork over an AV. I suggested that for this one too, but he said no, and the user was too afraid to disobey. Kinda like a retarded battalion leader sending his men down the hill on what would be a suicide mission.:cross-eye He wouldn't.. NO ... No wouldn't have been looking to set him up for this... would he?
Nah! That WOULD be retarded. Well either way....

BTW; This laptop user had been without it for about three weeks while the owner was checking it out. Initially the business owner reportedly found 150 viruses. Then a few more on a second sweep. Then nothing. But it still cut people off the web when connected. So finally after it sitting for a few more days, and the user bitching about it... I took over. I can't stand lengthy repairs. SO I jumped in. Found over 100 myself.... Just prior to really digging in, I posted my question. Sorry 'bout that. I might have been premature. But still was concerned as to the "disconnecting of other users" issue at the time.

Thanks guys. Hopefully this is the end of issues for now.

[Tokelil]

Tough virus cases like this are always wiped, since it is way faster to put on a new image than cleaning those up. (Ofc. we only service our own pc's/laptops, which we have up to date images for.) You can clean it our for days with various clean tools, just to discover that the next time it has internet connection, it all comes back. :) And who knows what mess it leaves around.

Anyway, good luck! :)

[Hanzo]

I've seen cases like that. When viruses get on a machine like that, it's usually better just to format and reinstall. I mean, what about registry entries being damaged, backup files being overwritten, messed up drivers and system files and all the nasty stuff virus writers do... ? you won't have a clean system unless you spend a whole lot of time with it.

What is creepy is that it brings down your network, quite some powerfull stuff that system is running, Did you check server logs to see what is that machine sending and receiving?

What I used to do is remove viruses/malware to a point the machine is usable, then backup, then format/reinstall and inmunize.

Did it sometimes while at Dell for *nice* customers, even if it was outside what was supposed to be covered for phone tech support.

[WHAT?]

Unfortunately, I can only suggest the same to the owner. It's not mine to mess with (even though I did a little bit;) ).

[Protocol]

Tough virus cases like this are always wiped, since it is way faster to put on a new image than cleaning those up.
I still think that HijackThis is the most useful utility for me when it comes to removing malware.

[WHAT?]

I still think that HijackThis is the most useful utility for me when it comes to removing malware.

But don't you still have to know what to look for? Research what you find? I'm gladly willing to send you my list that "Hijack This" produces, next time.:knocked-o

[Tokelil]

I still think that HijackThis is the most useful utility for me when it comes to removing malware.Yes but as WHAT said, it requires quite a bit of practice and research. And time == money... ;)

[Protocol]

But don't you still have to know what to look for? Research what you find? I'm gladly willing to send you my list that "Hijack This" produces, next time.:knocked-o

Yes but as WHAT said, it requires quite a bit of practice and research. And time == money... ;)
Yes, I could help with your logs. :foureyes:

Or you could paste your log straight into the HijackThis log file analyzer (http://www.hijackthis.de/). :rolleyes: :bulb:

By the way. I still think that HijackThis is the best and most thorough way of detecting and removing browser hijackers and malware.