Dumping physical memory to disk

[GretyM]

So this is what happened, Revo didn’t find MSE, but i remembered that the MSE setup file was still on the laptop, so i deleted it, from the recycle bin as well and voila, Avira is on and checking

Regarding the updates left, should I install them? The other two were successful

Dell site: I tried switching browsers, I closed all Mozilla tabs, I killed the process in Task Manager, opened new for both Yes and No, same with IE, I’ll just have to wait and see if the Trojan is still there, perhaps he got scared and ran off…screenshot

Sidenote and background while I got you on the other end: what this whole situation started with, I think, was that after closing the lid of the laptop and leaving it like that let’s say over night, sometimes, in the morning, I used to get the message Windows has recovered from an unexpected error, would you like to send a report bla bla and all applications were closed, he practically shut down.
In addition, windows explorer froze from time to time and then the message was something like Windows explorer has to be restarted or the like, I can’t remember and don’t have a screenshot either. The thing is I got the message with the explorer thing again today, so maybe there is more to it. I haven’t gotten it ever since the bluescreen so I thought everything would be ok again. Any remarks? Ideas?


Update: Avira finished scanning, that setup file from the other day seems to be deleted, two others were found infected instead:
'C:\Windows\System32\config\systemprofile\AppData\Local\niaxama.dll' infected with 'TR/Trash.Gen' [trojan]
'C:\Windows\System32\config\systemprofile\AppData\Local\niaxama.dll' infected with 'TR/Spy.Gen' [trojan]
they were both quarantined, can i delete them from the respective folders? i mean they are in system 32 so....

 

[Anak]

Yes try the updates. report back how it went.

Dell site: I'm leaning towards the last reason "service tag is not in right fomat, if there are spaces or hyphens do not include them, just put the string of numbers/letters in box.

On sidenote: are you in the habit of closing all apps/programs before you close the lid or do you leave some open?

On the Avira scan: Just let Avira do what it was designed to do, and remove them for you. It will probably ask you to reboot, even if it doesn't you go ahead and reboot.

 

[GretyM]

well the posts are getting shorter, so that must be a good thing

updates were successful

no hyphens spaces in service tag

i leave everything open, sounds like it's a bad habit....

so the files in quarantine will be deleted? aha....ok

 

[Anak]

well the posts are getting shorter, so that must be a good thing

Caught me at a bad time, I just woke up, and saw you were still in-forum, so I rushed a reply out.
I can make them longer if you like.

updates were successful

Good!

no hyphens spaces in service tag

We'll have to look into that. See below. ↓

i leave everything open, sounds like it's a bad habit....

Ahh, yeah! :banghead:
Sleep, and hibernation is still a sore spot with 7's power management.
It is supposed to return you to where you left off, but usually has problems.
My machine (see specs) gives me the same reaction if I leave programs open.

so the files in quarantine will be deleted? aha....ok

They should be.
The usual procedure is:

• To let the program run a scan.
• When it is finished It will tell you one of two things, your machine is okay/clean or it found something that is contrary to its database.
• It should give you the option to look at the files or send them to quarantine with the option to remove them.
• You pick remove, it removes them, and then asks you to reboot because if you don't they will still reside on your machine, and rather than forget it is better to reboot.

I do not have Avira so the above is a variation on a theme.
Some information on Avira: Avira Documentations Pick what pertains to you.

You should double check your wi-fi security.
That trojan Avira found: Encyclopedia entry: TrojanProxy:Win32/Sefbov.E - Microsoft Malware Protection Center Is an email bot designed to turn your 1012 into a zombie sender. :devil:

   Warning

Be very careful when you are out using any hotspots, including the University!

From above:

no hyphens spaces in service tag

See Laptops section. Does it look similar? What is a Service Tag and How Do I Locate It?

Try using this, you will need to use IE instead of FF or else it will give you a warning: Dell - Support

 

[GretyM]

) whatever helps get my laptop in good shape

yes, i know my service tag as i've had past problems with it and had to report to Dell, mine is a 7 Alpha-numeric code

well i thought that is the good thing about laptops you just close/open the lid and have all the applications where you left them...sheesh, people with no computer knowledge...

i hope i get rid of all the viruses with Avira now, my firewall is on so i thought that should be enough

haha, the Dell site can't find my service tag and asks me to enter it manually but there is no field for that...i think we can agree that this will not work ) check out the screenshot

 

[Anak]

) whatever helps get my laptop in good shape

yes, i know my service tag as i've had past problems with it and had to report to Dell, mine is a 7 Alpha-numeric code

How did your communication with Dell turn out, were they able to help?

well i thought that is the good thing about laptops you just close/open the lid and have all the applications where you left them...sheesh, people with no computer knowledge...

Now that I have a new reason, let me look into the power management situation, maybe I can help the both of us.

i hope i get rid of all the viruses with Avira now, my firewall is on so i thought that should be enough

Download, and install this: SpywareBlaster® | Prevent spyware and malware. Free download. , and or WinPatrol
They are extra layers of protection.

haha, the Dell site can't find my service tag and asks me to enter it manually but there is no field for that...i think we can agree that this will not work ) check out the screenshot

Try Belarc Advisor - Free Personal PC Audit or Speccy - System Information - Free Download . They might be able to scrub that number out of the Dell files.

 

[GretyM]

Well, the Dell guy was very nice and helpful, my problem wasn’t really a one to be solved I guess (from time to time, for a matter of a few days, my display would just revert colors, I mean what was supposed to be black was green, what was white was pink and so on, and it was not reproducible, so after emailing back and forth the problem was gone and hasn’t appeared since, but I guess they could have helped somehow)

Let me know on the power management situation

I chose winpatrol cos the dog is so cute and Speccy, looks cooler – women huh?

 

[Anak]

Well, the Dell guy was very nice and helpful, my problem wasn’t really a one to be solved I guess (from time to time, for a matter of a few days, my display would just revert colors, I mean what was supposed to be black was green, what was white was pink and so on, and it was not reproducible, so after emailing back and forth the problem was gone and hasn’t appeared since, but I guess they could have helped somehow)

Sounds like one of those "By Proxy" arraignments.

Let me know on the power management situation

Sure will! Hopefully in the near future.

[FONT=Bradley Hand ITC, cursive]"All I wanted to do was to come home, sit down, kick off my shoes, and put my feet up.
It was a long day. I reached over for the remote, and put the radio on.
Then looked in my tote bag, and pulled my 1012 out so I could check my emails.
There was one email from 7Fourms [/FONT]View attachment 195329

[FONT=Bradley Hand ITC, cursive] Nothing yet, still looking ......Anak"[/FONT]


​

I got a laugh, I was going to translate that, but Look how google translate handled it :

[FONT=Bradley Hand ITC, cursive]"Alles, was ich tun wollte, war nach Hause zu kommen, sitzen down, kick off meine Schuhe und meine Füße hochlegen.
Es war ein langer Tag. Ich griff nach der Fernbedienung, und setzen Sie den Radio auf.
Dann schaute in meine Tasche und zog meine 1012 aus, damit ich meine E-Mails überprüfen könnten.

Es gab eine E-Mail von 7Fourms
[/FONT]

[FONT=Bradley Hand ITC, cursive]Noch nichts, noch auf der Suche ...... Anak "[/FONT]
​

"All I wanted to do was to come home down, sit, put your kick off my shoes and my feet.

It was a long day. I grabbed the remote control and put you on the radio.
Then looked in my pocket and pulled out my 1012 so I could check my e-mails.

There was an e-mail from 7Fourms

Nothing yet, still looking ...... Anak ":roflmao:​

I chose winpatrol cos the dog is so cute and Speccy, looks cooler – women huh?

I can understand that.
​

IMHO. Women do seem to have a better sense of fashion.

I caught a consumer report today that found that, if a man goes to buy a car he should bring his significant other along to temper his emotions while trying keep all the information about the deal organized.
Source: https://www.npr.org/blogs/thetwo-wa...opping-tactics-steer-them-toward-better-deals

By the way....I did hear some problems last year not lately with keeping the "Scotty" Icon visible. It is search-able.

 

[GretyM]

what's a By Proxy arrangement? remember i am no IT-know-it-all, that's why i'm on the forum

"put you on the radio." that is cute....but is this some random text? translated to German and then back to English? i think if you keep going you come to some hilarious findings...but do you understand German?

i'll keep an eye on the Speccy

two more viruses, why doesn't he find them on the first go, now he is scanning the 3rd time, i bet he'll spit out another two
C:\Windows\Temp\rnnvmn\setup.exe infected with TR/Dldr.Cutwail.BE.22
C:\Windows\Temp\omtgfh\setup.exe infected with TR/TDss.inyc

 

[Anak]

what's a By Proxy arrangement? remember i am no IT-know-it-all, that's why i'm on the forum

Urban Dictionary: by proxy
Reasons #3, and 6, but you have to read #5
It's also a legal term.

"put you on the radio." that is cute....but is this some random text? translated to German and then back to English? i think if you keep going you come to some hilarious findings...but do you understand German?

No. No German. Some Lithuanian. Į sveikatą! (Cheers/Good Health)

I typed in to translate the descriptive paragraph (A day in the life of GretyM) where the snip/attachment is located.

Then I thought I'd better check it, so I reran it through translate, and that's what I came out in the quotes, that is why I'm laughing at the bottom.
Your right, the more you ran it the worse it would have gotten.

i'll keep an eye on the Speccy

In all these programs, do you use pay or free?

two more viruses, why doesn't he find them on the first go, now he is scanning the 3rd time, i bet he'll spit out another two
C:\Windows\Temp\rnnvmn\setup.exe infected with TR/Dldr.Cutwail.BE.22
C:\Windows\Temp\omtgfh\setup.exe infected with TR/TDss.inyc

That is all right for it to work that way, but pssstt!...If you run it in safe mode it should go faster.

 

[GretyM]

oh sorry, i was not familiar with this term...

cute article with the female consumers

haha, that is supposed to be a day in the life of moi? quite boring life you give me...
it's funny, I just came from visiting a Lithuanian neighbour what are the odds?

mind you, i don't have the money to "invest" in my laptop...as long as i don't get bluescreens and nearly lose my data, i'm happy

well i disagree: Antivirus software shouldn't work like that, how do i know i'm virus-free?

nite

 

[Anak]

oh sorry, i was not familiar with this term...

cute article with the female consumers

Your not familiar?
Do you mind me asking what your major is at University?

haha, that is supposed to be a day in the life of moi? quite boring life you give me...

Boring? You live your daily life, a job, family, friends? Plus go to the University, and you say that is boring? You have never wished for some quiet time at the end of your day?

Then I described it for myself...When I have a full day, and come home from "work". The first few moments I like to spend are quiet, with Mozart!

Oh! I apologize, your youth supersedes difficult days.

it's funny, I just came from visiting a Lithuanian neighbour what are the odds?

50/50

mind you, i don't have the money to "invest" in my laptop...as long as i don't get bluescreens and nearly lose my data, i'm happy

You mean to say that amongst your friends, you cannot find one of them that would have a a spare 1x2gb stick of ram to loan you?

well i disagree: Antivirus software shouldn't work like that, how do i know i'm virus-free?

nite

http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html

nite...

 

[GretyM]

my major is European Integration, but we have a Bachelor/Master system, with the implementation of the Bologna process in most EU-countries. i sensed the question about my major to sound a bit judgemental, maybe? perhaps because it was connected with a term i didn't know...

i guess it's not boring....

we were talking about pay or free programms not ram sticks....so i said i wouldn't buy programms. on the other hand i wouldn't know how to change/replace/add a ram stick to a laptop, so i would probably just go to a repair shop/call Dell and the like to have it fixed and besides i don't have friends with spare computer parts. what would a loan of a spare part bring me? i would have to return it eventually...did i maybe miss your point?

i shall look more into that clean install tutorial, but i have no CD drive and no installation CD for that matter. i only made the Restore USB stick and i think that will only bring it to factory state, won't it?

ok, well due to this laptop issue combined with my laziness i have not given any attention to my term paper and i'm running out of time. i will give updates on the health of the 1012 on Monday after i submit the paper

 

[Anak]

Judgmental? Possibly,
I thought it improbable that with your level of schooling that you were not familiar with the term, and it lead to my next thought which was, I was curious as to what your courses were at University.

As an example, you may have asked a fellow student to help you in covering a particular course, in a sense s/he is your proxy.

Have all of the initiatives, and action lines in the Bologna process been reached yet?
It doesn't sound boring.



If you check the link at the bottom of my post here on Dell Documents: http://www.sevenforums.com/crashes-debugging/210340-dumping-physical-memory-disk.html#post1763937
The service manual can show you: Dell Service Manual
There is a wealth of information about the 1012 in those links.
Reposting link: Dell Inspiron 1012 Manuals

A loan would allow you to see the gains you would get by upgrading. Most "computer friends" have more than a few spare parts, and would more than likely just give it away so it is being used rather than sitting around gathering dust.
I have lost track of all the machines, and peripherals that I have given away.

Without the use of a CD unit or disk going to a repair shop would seem to be your only option unless you could find a computer club at University or around town, but be prepared to be without the use of the 1012 for at least 2 to 3 days.

In that event you would need to put all your valuable documents on USB drives so they are available to you, but then you would need to find machines at University or the local library to work with them.

To answer your "Restore USB stick" yes it should, but I need to know more about what you did to make it.

Hope all goes well with the paper!

 

[GretyM]

Sorry for the late answer, I was enjoying my freedom

Well, I wouldn't say that students are know-it-alls. I’ve always had this thing with the term proxy, I could never relate to it, I didn’t really understand its meaning.

i would guess that the main goals have been achieved, I mean for us students to have this mobility to study around Europe is pretty much an achievement. Improvements are always needed, like in quality, but on the other hand it depends where you look at it from, the institutions also have to upgrade

wow, I don’t think we walk around in such circles, where people just give away computer parts, all my friends or even acquaintances just have a laptop, use it for googling and that’s about it … I wish I had more friends like yours…even with my problem, I didn’t know who to call in order to get it fixed, as no one knows such things

the laptop isn’t in warranty anymore but I don’t know if I would want people to open in up just yet… plus I’m waiting for an external drive to finally come back in stock and then I will really empty the whole HDD

well, I have the option in control panel to set up a backup or a restore, you enter an USB stick and it will do the work. Bringing the laptop back to factory state will it also get rid of all the Trojans? Or will those just hang around?

I hope the paper goes well too, as I put no effort whatsoever in it, but we’ll see

So to conclude: the only thing left is to get all my docs off the laptop and remove the viruses, other than that, I’m good right?

 

[Anak]

[FONT=Verdana, sans-serif]Apologies are unnecessary:

Life is what happens to you while you're busy making other plans.
John Lennon, "Beautiful Boy" English singer & songwriter (1940 - 1980)

You have probably preformed a proxy action, and never realized it.
Think of proxy this way...One of your Parents, siblings if you have any or friends has ordered an item in their name from a store, but they are unable to go and pick it up so they ask if you would, and you agree.

You are the proxy.

Sounds like the "protocols" are a good plan of action for the future.

Yes it is difficult when the "circle" is laptop orientated. I am familiar with laptops, but have been a lifelong desktop user.

It will be nice to have that external HDD, hopefully they will come down in price soon. You might want to consider an external SSD.

[/FONT]

well, I have the option in control panel to set up a backup or a restore, you enter an USB stick and it will do the work. Bringing the laptop back to factory state will it also get rid of all the Trojans? Or will those just hang around?

So to conclude: the only thing left is to get all my docs off the laptop and remove the viruses, other than that, I’m good right?

According to this, yes: Does restoring to factory settings get rid of most viruses and - Microsoft Answers

Just to be sure I would run the scan first to make sure your docs are virus free then back them up to external storage, and then do the factory restore.

I hope the paper goes well too,

So do I.

 

[GretyM]

hi,

now i should really start using the word in sentences

oh not the price is my problem, although it is quite high, i just found a really cute one with some flowers on it and a stand, but every website has it on reorder and it just doesn't seem to get there, the day just changes all the time...and i wouldn't want to buy it in the US to pay for the shipping costs and then also pay for customs

oh, good point on scanning the restore docs on the USB stick

well then, have a nice day

 

[Anak]

Hi,

Well, you don't have to go overboard.

Flowers would be nice.
The delay is most likely because of the bad weather South-East Asia has had. That is were the big HDD manufacturers have them made.
Floods really will bring armageddon in 2012, insist resellers ? Channel Register
Have you checked here in the States, what model are you looking for?

You seem to like working with those USB drives, and it may be how you contracted that trojan.
Take a look at this post in another thread. If you use one of those two, it will help by stopping Autoruns on USB drives.

Regardless of what you use to clean the infected computer, you need to turn off autorun.inf on the USB drive. Two options are Panda USB Vaccine, or BitDefender’s USB Immunizer which can be used to protect your computer from any infected USB device.

Source: http://www.sevenforums.com/system-security/211161-virus-offline-computer.html#post1769058

Will try, you have a great evening!

 

[GretyM]

hey,

well aren't most of things made there?
on the other hand i think it's not because they don't have them yet, but i think it's not coming in stock anymore, although websites advertising it...
yes i have, but again with the shipping costs....it's the Hitachi Lifestudio Mobile (not Plus), i think it is very cute, not your average black external drive

USB drives are my only option, the 1012 doesn't have a CD drive, what am i left to do? i will install one of the two....i think by the time we're done here, i will have more anti- programmes than i will have regular applications

good then, i'm off to work, talk to you later