Replies

You’re welcome. Happy computing with your new graphics card.

Dear JoeP,
I downloaded and ran Autoruns as you suggested. I found two entries that showed “file not found” so I unchecked both of those and rebooted. The error message did not show up. Is that all I have to do? I have attached a screen shot.

Hello,
I’m not Joe, but have some comments.
Autoruns is a good tool, in cases like this; I was going to suggest it earlier, but I thought that Leif’s first suggestion was a good start, something to check (since the System Configuration Utility, msconfig, is there on all PCs, if only meant as a simple troubleshooting tool. However, it only shows some run entries in the registry and the files).

You have found a “cwjv.wmo” entry in the Shell key; it should be removed/disabled. The bad entry probably looked something like this: rundll32.exe cwjv.wmo htvss.

The rundll32.exe entry is also a bit odd in the Winlogon shell key, I think. It is a valid system file. It’s used to execute a DLL, so nothing wrong with that, but it may have been used by malware.

NOTE: Please note that “Explorer.exe (Windows Explorer) C:windowsexplorer.exe” should be there, and must be there. I think you know this, just be careful if you remove or disable something from the shell key.

If you uncheck a registry entry in Autoruns, the entry is moved to a sub key in the registry, and thus it will not be executed at logon. Autoruns can restore it, if you check the box again. To remove the entry from the registry, check the box, right-click and select Delete.

As usual, when working with the registry, it is good to have a back up of the registry key, before doing changes. One should not change things there, unless one knows what the result will be.

The logon tab in Autoruns is the most commonly used. Usually it’s a good idea to hide Microsoft and/or Windows entries (Options menu + a refresh) to filter, zoom in, on the other entries.

Some sections on the Logon tab are very important for the PC and should generally speaking never be touched: Userinit (never touch that one) and Shell. Changes in the run keys and the startup folder, on the other hand, can affect installed software (or the OS in a minor way). In your case you have some extra entries in the shell key that I think can be disabled/removed (I would just keep the important “Explorer.exe”.). You can wait and see if there are other opinions.

Malwarebytes’ Anti-Malware is also known to be good with such malware. But now it seems like you have most, or all, removed.

BTW: not all “File not found” entries in Autoruns are bad or leftovers from some software uninstalls. In the case of some driver entries, they are there in the registry in case they are needed by the OS and the software.

There should be only one HOSTS file which contains entries, are you saying that you have a folder full of HOSTS files?

Dave,
I believe she’s talking about entries in the hosts file, see [post=’812606′]post 812606[/post], and she replied to Joe, talking about the entries in the hosts file. But some more info. about the path and file can of course be good.

With Windows 7 they add features to the different editions, without removing some as in Vista. So in for example Windows 7 Professional they added: Encrypting File System (EFS); the old encryption system that has been there in Windows 2000, XP and forwards. EFS is available in Professional, (Enterprise) and Ultimate. BitLocker is, as Joe said, available in Ultimate (and Enterprise).

Give a little pop-up like so: [snip]

Just kidding, Leif. I understood from your post that it is a simple dialogue box, but the end of the sentence opened up for some fascinating possibilities…

However, as you said; I don’t have any .NET installed, so I got a 0xc0000135 error (and one can get that error for several versions, and situations, but no .NET is the reason for me)., but I guess that that works as a reminder as well.

[snip] I’ve tested it here and it seems to do what it’s meant to do….

And that is?

Which edition of the OS do you use?

Have you checked, in the Control Panel: Sounds And Audio Devices (can also reach it by running: control mmsys.cpl,,0 ), on the Volume tab, that there is no check in “Sound off”, and that the volume is set to an appropriate level?

If that seems OK, take a look in the Device Manager (Control Panel > System > Hardware tab > Device Manager button; or by running: devmgmt.msc (or using some of the other methods)); see if you can find any yellow exclamation marks, in this case related to sound devices.

I saw your other thread about PDFs; did they do a reinstall at the shop?

I think you have to take a look in the BIOS Setup.

To enter BIOS Setup; press F2 during the Power-On-Self-Test (POST). On the Advanced tab in the BIOS Setup utility, you should have an option: “Primary Graphics Adapter”.

If I quote from the manual, available here: ALiveNF6G-GLAN [at http://www.asrock.com]

This item will switch the PCI Bus scanning order while searching for video card. It allows you to select the type of Primary VGA in case of multiple video controllers. The default value of this feature is [PCI]. Configuration options: [PCI], [Onboard] and [PCI Express].

Your graphics card ought to be in the PCI Express (PCI-E).

Move to Exit screen, select Save Changes and Exit, OK.

If you don’t want to save any changes, or just have a “look around”; select Discard Changes and Exit. Or press Esc and answer No (do not to save changes), perhaps one time to get to the Exit screen and once more to exit.

Can you tell us something about the hardware? Which motherboard do you use?

Are you sure you didn’t download that one from Windows Secrets? I’m sure several people have a similar file from around that date.

But of course, do scan everything you download and use.

Hard to use the Windows installation disk when your laptop has an OEM Vista on it. They don’t give you a disk any more.

Well, it was a comment based on the information from the OP in this thread.

It would be good with a little more information, or links to pages with such information, when you decide to post, even though it’s at an early stage, Otherwise one can perhaps wait with the post until there is such information.

It’s been mentioned at Adobe’s PSIRT blog: New Adobe Reader and Acrobat Vulnerability [Adobe Product Security Incident Response Team (PSIRT)]. And in blog posts after that.

There is a security bulletin released: APSA09-07 Security Advisory for Adobe Reader and Acrobat

As Stuart mentioned, this early on one can disable JavaScript in the abovementioned Adobe products (Adobe Reader and Acrobat 9.2), if one hasn’t already done that. JavaScript is, however, enabled by default, and since it is reported that the vulnerability is being actively exploited, it is critical to take a look at the settings in the software.

The abovementioned security bulletin, the Security Advisory, will be updated, as usual, when they have scheduled a fix.

So far a quite simple zero-day issue. As we have seen before when it comes to the PDF formart it’s so far targeted attacks, in this case it’s also simple to mitigate the issue.

[…]… a simple method of reaching similar conclusion so THANK YOU!

You’re welcome.

Yes, I have seen other, some quite old, some quite convoluted, methods; replacing the log file, deleting the log file, trying to lock the log file etc.

And yes, the abovementiond method, in this case only used because somehow the Default debug level is running at full speed, does turn off debugging, so there will not be a log if something goes wrong. But in many cases it’s possible to replicate the problem, so one can run in debug mode if needed. ZoneAlarm saves a copy of the log file in a zip file; I don’t know the criteria for when it does this (size, age etc.). But if you stop & restart it should backup the old one and create a new one.

Since, in the above situation, the log activity was running amok one could watch the size change in real time, if one wanted. I have earlier mentioned a small tool that can monitor file size changes in real time, quite nifty. Monitoring file size changes in real-time.

As mentioned in the link, posted by Timothy, you can use the Windows installation disk for these tasks, choosing Custom installation, “Drive options (advanced)”.