i can't see my last posts...they were quick replies...sorry if this is a repeat;
used ms Scanner msert.exe mcafee rootkitremover.exe TDsskill.exe online housecall scanner and online kaspersky
all come back clean.
I have disabled all wireless in services and network adapter settings cuz i thought that was how bluetooth pairing was getting in.
I use Comcast Arris Cable modem as direct hardwired connection.
Dear Noel
Thank you so much for your kind attention...I realize your expertise offerings are probably all voluntary...If after reading this it is more than you bargained for...it's OK
I understand...any helpful suggestions are deeply appreciated.
We are dealing with 2 separate issues here...Remoting and failed Windows Activation updates. I can live with the remote issues in the firewall...I am really want to stay focused on getting the updates issue solved so here we go.
I have disabled bluetooth support services in the services panel as well
as uninstalling the software for it. But because the Chip is inside the pc
they are still able to use the device's signal
once they turn it on they use bthprops.cpl bthserv.dll bthci.dll and device pairing wizard
to install a virtual usb device and from there they use terminal server keyboard and mouse driver along with displayswitch.exe to control my pc.
When that doesn't work they attempt termsrv.dll irprops.cpl remotpg.dll systemproperties msra.exe U name it if it's there they are trying it
I have disabled usb composite device which is what installs a virtual usb device along with disabling Terminal Server Keyboard Driver, Terminal Server mouse driver, Consumer IR devices, microsoft ISATAP Adapter Microsoft 6to4 Adapter and Teredo Tunneling all in the Device Manager...if I don't I will see up to 6 ISATAP Adapters and 2 6to4 Adapters installed.
I need no internet connections at at all for these attempts it's like the bluetooth device
works just like a cell phone through cell towers they just have to dial me.
under system credentials i see virtual app...I removed it once but it's back...I have no idea if this is a normal credential that is supposed to be there.
In windows vault under generic credentials:
virtual app/didlogical modified 1/06 2013
Username: 02rzlbpskugq
Password: ········
Persistance: local machine
I just finished a complete reinstall of a Dell Inspiron 1501 Vista Home Premium x32 PC with the same Remote and 'not genuine" issues. All the same devices/services were shut off and it was nearly impossible but I got all the way thru to the last update by using all
the Fixit software. Had to do system restores multiple times and race to the firewall
to block remote services to stay up and running.
Those Fixit options didn't work on 7. 90pct of the time this is the response i get:
Troubleshooting cannot continue because an error has occurred
We're sorry but the program encountered an error and cannot continue.
Please try again later
I need to know what services windows update actually uses so i can move on up to 7SP1 as there are some softwares that cannot be installed like Direct X and of course security exploits (the remoting) without the SP1. I also need to know why kbs are being rejected saying they don't apply to my system and if they don't why are they downloading at all.
This pc was ordered thru online HP site on Jan 2010.
It didn't arrive from China until March 2010. The very first ever re-install was about 4months ago because key buttons on the left side of keyboard stopped working. I read every topic I could find, did system restores, changed options in ease of access and no matter what couldn't get them back...read the very last option was to do a clean install which still didn't work. We lost Tab Shift Ctrl and Alt keys...the right side works fine but it's really hard to live without a Tab key.
In closing, after the re-install...is when NOT GENUINE COPY started showing up.
Because the HD was reformatted and I used both the partition Recovery software and
the installation disks on my several attempts I considered the possibility of something
extra special being incorporated into the software prior to being shipped from China
I mean why did it take 4 months to get here...just a thought...but when the same issues started with Genuine copy and remote on the Vista - I tossed the notion.
I pray we can get this solved - because this is not even my pc. I have been having the same issues on my HP DV7 windows 7 ultimate since mid 2011 only mine started with
the windows activation issue locking down my system from a microsoft update.
If we can get this one solved I can finally fix my own pc.
I Was convinced I could figure this out...but finally I am asking for help. I attempted to try and get help starting Jan 14 all the way up until yesterday on answers.microsoft.com (only 2 responses) but I guess it was too complicated I was referred to the Fixit buttons and then finally a gent suggested MGA Diagnostic tool so I left a copy of results for him and waited an entire day for a response and then it occurred to me that he was making the suggestion but didn't necessarily volunteer to be the one to study the results.
Anyway, I clicked on some link having to do with that tool and I found you.
I waited 9 days on the other site with no results. I am just trying to be honest with
you so you don't think I am running people in circles. I would really like to work with you If you want to stick with me for a while. I would like to close out that ticket but if you think I should keep it open just let me know. I don't do this for a living...I just keep family and friends up and running because for some reason they think I am intelligent.
Thank You so much!
You still haven't said what your internet connection is.
You can disable the Bluetooth in Device Manager - then there's no way they can use it to get in.
What installation media are you using?
Bluetooth signals are limited in range to about 15-20 feet - so who's on the other side of the wall?
I use Comcast Arris Cable modem as direct hardwired connection
my network card is a Realtek PCIe Gbe Fast Ethernet Family Controller
I have an Intel wifi link 5100 AGN
and Intel Chip set drivers
I have tried using the recovery software on the partition as well as using
HP Premium OEM installation discs.
I live in a house and all houses on either side and behind me are
at least 100 ft away in any direction.
Last edited by GGirl4; 24 Jan 2013 at 22:25. Reason: mispelled link and added a comment
Hope you can see it - this is what my firewall is hit with...yesterday there were only 289 hits
Background
Bluetooth is a wireless personal area network for short-range transmission
of voice and data digitally. It uses radio waves transmitted in every direction,
and can travel through walls and other barriers not made of metal.
Bluetooth devices fall under one of three classes. Class one Bluetooth devices,
which are the most powerful and have a range of up to 300 feet, are most likely
to cause exposure to radiation that is similar to cellphones.
Class two Bluetooth devices, which are often used with mobile devices,
have a range of 30 feet, while class three devices have a range of about three feet.
The FCC does not require Bluetooth devices to be certified with an SAR level,
as cellphones are, because Bluetooth devices are considered to be “low-power,
non-licensed radiofrequency devices.
I guess it could be a neighbor but how are they logging in with Microsoft login
powers?
I'm not convinced they are.
As I said earlier, my reading is that what you showed in your screenshot is outgoing traffic, not incoming.
I may well be wrong - it's a long time since I had to read a firewall log, and I'm not familiar with your firewall either.
These are the programs on this PC - So obviously something installed on the PC is making this happen. The only hidden files have to do with
bootmgr, hyberfil.sys, pagefil.sys, WindowsShell.manifest, api-ms-wincore files, and DV8 Notebook drivers. I guess I am going to scrap it all and try
one more time and try to get from Oem to 7SP1 with nothing else installed then load and test each program 1 at a time even though the problems
start the minute I get OEM installed where my rights to install start disappearing so maybe it's something inside the extra junk HP pre-installs.
Is there a command I can use to handpick the programs from the OEM cd that I want installed?
P.S. my responses this week will be slow in coming if at all cuz I have to prep
for a house inspection...I'm kind of a packrat...Gotta git organized!
Code:Programs I installed Games 123 Free Solitaire 1st Free Solitaire Backgammon Deluxe v1.2 by Arthur Crump copyright 2000 Loco 2.0 by Grateware Logyx Pacvk v4.17 by Drazen Beljan - Chakz Mancala 2000 v1.2 by Arthur Crump Monte Carlo Patience v1.2 by Arthur Crump Copyright 2000 Patience by DavidMayne.com PatPack Patience v8.0 Copyright1992-2005 Maurice Abraham Picture Puzzle v1.0.0 by Joseph Gillman JanDesign.com Puzzle Collection v2010.08.11 by virtualtoybox.org Shark Dominoes v1.2 by Arthur Crump Copyright 2000 Yap Yamb (net+) v12.07 by Drazen Beljan Adobe Flash player 11 plug-in Apple Application Support Apple Software Update Avast! Free Antivirus Avast! Webrep Avast! Webreb (x64) CCleaner (x64) Comodo Internet Security (x64) DivxPlus Web Player Eusing Free Registry Cleaner Foxit Reader Hulu Desktop ImgBurn Java 7 Update 11 Kingsoft Office 2012 (8.1.0.3032) MalwareBytes Anti-Malware Version 1.70.0.1100 MozBackup 1.4.9 Mozilla FireFox PeerBlock 1.1 (r518)(x64) Quicktime Recuva (x64) Speccy (x64) SpywareBlaster 4.6 SuperAntiSpyware (x64) Teamviewer 7 Toolwiz TimeFreeze Windows Media Player Firefox Plugin Windows Resource Kit Tools - Subinacle.exe WinPatrol Pre-installed by HP Activate norton online backup Compatability pack for the 2007 office program Corel Paintshop Pro Photo X2 Corel VideoStudio 12 Cyberlink DVD HomePage Protection HP3D Driveguard HP Advisor HP Customer Experience Enhancements HP Games HP MediaSmart DVD HP MediaSmart Internet TV HP MediaSmart LiveTV HP MediaSmart Movie Themes Hp MediaSmart Music/Photo/Video HP MediaSmart Menu HP MediaSmart Software NotebookDemo HP MediaSmart Webcam HP QuickLaunch Buttons HPetup HP SmartWeb Printing HP Support Assistant HP Tone Control HP Update HP UserGuides 0143 HP Wireless Assistant IDT Audio Intel@Matrix Storage Manager JMicron Flas Media Controller Driver LabelPrint LightScribe System Software Nvidia Drivers (x64) PhotoNow! Power2Go Power Director Power Recover Realtek 8136 8168 8169 Ethernet Driver SlingboxWatchYourTVAnywhere Synaptics Pointing Device Driver (x64) Validity Sensors DDK(x64) Microsoft Programs Microsoft Office Powerpoint Viewer 2007 MS.Net Framewirk 4 Client Profile(x64) Microsoft Silverlight MS Visual C++ 2005 Redistributable(x64)(x64) MS Visual C++ 2008 - Redistributable x86 9.0.30729.17 MS Visual C++ 2008 - Redistributable x86 9.0.30729.4148 Ses Driver MS Visual C++ 2008 - Redistributable x86 9.0.30729.6161 MS Visual C++ 2010 - Redistributable x86 10.0.40219 MSWorks Windows Driver Package - Western Digital Technologies (WDC_SAM (01/19/2011 1.0.0009.0)(x64) Windows Live Essentials Windows Media Encoder 9 Series
Last edited by GGirl4; 28 Jan 2013 at 12:33. Reason: Added comment/spelling
You've been using Registry Cleaners.
DON'T
UNDO anything that Eusing has 'fixed' then uninstall it.
UNDO anything the CCleaner registry cleaner has done - the remainder of the program is fine, so there's no need to uninstall it, but please don't use the registry cleaner.
I can't see anything else strange in that listing - although I'm not a fan of WinPatrol or Comodo, and I know nothing about Hulu Desktop.
As for the games you have installed - are these java-based?
With the security problems that Java has been having lately, I'd be very careful about using such programs.
uninstalled Eusing - had only used it once - handpicked my selection
Never used Reg piece of CCleaner - I use it as a tool to monitor things happening
in the background I might not be aware of like activeX temp files and recent files.
Don't know how to tell if a file uses java so i uninstalled it - and ran each
game to see which were still working.
Uninstalled Patience and tried to uninstall Puzzle Collection by VirtualToyBox.org
It started throwing a fit saying I don't have permission to uninstall
and I had to contact the owner of the file.
Tried using unlocker to delete...nope...had to boot into safe mode and take
ownership of the file then use free_file_wiper.exe to delete and wipe 3 times.
Looked in the firewall and it was trying to use dllhost.exe to call home.
Backed up Registry then searched puzzlegames.jar and Patience...
manually deleted all references.
Don't think these are the culprits cuz I didn't install them til 20Jan but
I had no idea they could be dangerous so Thank You!
I use Winpatrol cuz it catches things trying to startup when the firewall doesn't
and I like that it barks at me to get my attention.
I was using Online Armor - have for years love seeing every file installed on the PC
so I can google it to find function but whatever's going on...it was able to
lock it up so severely it wouldn't launch...it only partially uninstalled and worse
it kept all the firewall rules blocking files that I was experimenting with
and I had no way to unblock them...couldn't even get it re-installed to change
the blocks so I had to start over and then move to Comodo.
Tonight I will try and get the updates working one more time...
Gonna focus on finding out what this is first:
In windows vault under generic credentials:
virtual app/didlogical modified 1/06 2013
Username: 02rzlbpskugq
Password: ········
Persistance: local machine
I want to delete it again but don't know if MS or HP are
the ones using it.
Last edited by GGirl4; 29 Jan 2013 at 11:40. Reason: added comment
Quote