If you see the error message "SmartBridge Alerts: MotiveSB.exe – Entry Point Not Found The procedure entry point GetProcessImageFileNameW could not be located in the dynamic link library PSAPI.DLL" at startup or when trying to run some application this post will be of considerable use for you as here you’ll find out how to solve this problem.
SmartBridge is a communications program which is used by a lot of Internet Service Providers including AOL. Motive SB.exe is not malicious program. This is a legal program which sometimes stops working for several reasons. SmartBridge Motive Sb.exe is known to be part of Broadband Medic diagnostic tools, BT Broadband, BT Desktop, BT Help, NTL Smartbridge, some HP printer drivers, etc.
Most users see SmartBridge Alert about GetProcessImageFileNameW procedure entry point when they install Internet Explorer 7 or some other software that modifies files SmartBridge uses. The most often modified file is PSAPI.DLL. Newly installed software puts another version of this file into Windows folder and MotiveSB program uses this file instead of the one that was provided with its installation. New PSAPI.DLL has another entry point of GetProcessImageFileNameW procedure so Motive SB.exe which loads on windows startup can't work properly.
If you are an advanced user you can solve problems related to MotiveSB.exe manually. Use Msconfig.exe utility to remove all programs using psapi.dll from startup. You should manually investigate which programs use this DLL. As a rule Motive SB.exe program does not appear at startup itself. Search for related programs and services instead. There is also the second solution: you should delete all copies of psapi.dll in your system except of the one which is used by your SmartBridge applications. However, this can stop other applications which use newer version of this DLL from working properly. You definitely SHOULD NOT touch PSAPI.DLL located in C:\Windows\System32 folder. Search for other instances isntead. After deleting or renaming all other instances of this DLL reboot your PC. Please note that this can cause instability of your system if wrong DLL is deleted.
However there is also a quick solution to fix MotiveSb.exe "entry point" and Psapi.dll error of this problem. You can make use of True Sword which finds and eliminates this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds. True Sword protects your computer against malicious programs that do harm to your computer and break your privacy as standard anti-virus software can do nothing against privacy breakers and malicious programs.
Wednesday, May 2, 2007
Digital Line Detect (DLG.exe) – Malicious program or not?
Dlg.exe is included into BVRP Phone Tools software suite which provides fax, phone book, e-mail and other sevices. It runs itself at Windows startup, resides in system memory and detects when you plug or unplug digital telephone line. Digital Line Detect is usually pre-installed by Dell and other computer vendors. It is also known to be included into Connexant V.92 and Broadcom modem drivers.
Some time ago Dlg.exe publisher produced spyware and that is why Digital Line Detect is sometimes treated as spyware. You should definitely delete it if you have some old version of Dlg.exe on your PC. However, now it is not spyware anymore. But note that even newer versions of Dlg.exe process can cause problems, system instability, memory and performance loss. Digital Line Detect is often classified as Non-Malicious Problemware.
If you’re an advanced user you can solve problems related to Digital Line Detect software manually. To completely solve "Digital Line Detect Dlg.exe" problem you should:
1) Turn off Dlg.exe autostart option in all related programs (modem drivers or BVRP Phone Tools software suite)
2) Kill Dlg.exe process
3) Use Msconfig.exe utility to permanently remove Dgl.exe from startup list.
4) (Optional) Locate and delete Dlg.exe file
However, there is also a quick solution to remove dlg.exe by using True Sword which finds and eliminates this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds. True Sword protects your computer against malicious programs that do harm to a computer and break information privacy.
Some time ago Dlg.exe publisher produced spyware and that is why Digital Line Detect is sometimes treated as spyware. You should definitely delete it if you have some old version of Dlg.exe on your PC. However, now it is not spyware anymore. But note that even newer versions of Dlg.exe process can cause problems, system instability, memory and performance loss. Digital Line Detect is often classified as Non-Malicious Problemware.
If you’re an advanced user you can solve problems related to Digital Line Detect software manually. To completely solve "Digital Line Detect Dlg.exe" problem you should:
1) Turn off Dlg.exe autostart option in all related programs (modem drivers or BVRP Phone Tools software suite)
2) Kill Dlg.exe process
3) Use Msconfig.exe utility to permanently remove Dgl.exe from startup list.
4) (Optional) Locate and delete Dlg.exe file
However, there is also a quick solution to remove dlg.exe by using True Sword which finds and eliminates this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds. True Sword protects your computer against malicious programs that do harm to a computer and break information privacy.
How to solve error message “Windows cannot find copy.exe”?
This error message may appear when you try to open disks or folders. Here you will find complete description and solution for this problem. The fact is that copy.exe is one of possible names of Salga-A worm also known as Perlovga virus (usually classified as win32.Perlovga.A). Copy.exe is dangerous to your system threat and it should be removed immediately. Other possible file names of this worm include host.exe, xcopy.exe, temp1.exe, temp2.exe and svchost.exe. Copy.exe worm (or Salga-A, or Perlovga virus which is the same) copies its references to autorun.inf files of different drives and creates subkeys inside HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 key which makes this file to be default Autorun handler for all drives in your system (local drives like C, D, E, etc, CD/DVD-ROMs, removable drives like USB drive and so on). So when you double click on some drive Copy.exe file is executed by Windows. Some anti viruses remove it improperly which causes "can not find copy.exe" error message to appear.
Or if you delete Copy.exe file itself, "copy.exe missing" error when accessing drives will appear. You can however still access your drives by right-clicking on them and selecting Open but this is very inconvenient.
You can solve Copy.exe missing problem manually. To completely fix "Cannot open drive... Windows cannot find copy.exe" problem it’s necessary:
1) Kill all processes related to copy.exe trojan (including but not limited to host.exe, xcopy.exe, temp1.exe, temp2.exe and svchost.exe)
2) Delete all files related to copy.exe trojan (including but not limited to host.exe, xcopy.exe, temp1.exe, temp2.exe and svchost.exe)
3) Clear all references to Copy.exe virus from Autorun.inf files on all drives or simply delete these files (please note, that this may stop some other useful autorun functionality of drives)
4) Delete subkeys under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 key which are created by Copy.exe file virus.
However you may solve this problem by using award winning program - True Sword – which can remove lsass.exe, lsass2.exe, lassa.exe and isass.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs. It scans hard disks and registry and destroys any manifestation of such malicious programs.
Or if you delete Copy.exe file itself, "copy.exe missing" error when accessing drives will appear. You can however still access your drives by right-clicking on them and selecting Open but this is very inconvenient.
You can solve Copy.exe missing problem manually. To completely fix "Cannot open drive... Windows cannot find copy.exe" problem it’s necessary:
1) Kill all processes related to copy.exe trojan (including but not limited to host.exe, xcopy.exe, temp1.exe, temp2.exe and svchost.exe)
2) Delete all files related to copy.exe trojan (including but not limited to host.exe, xcopy.exe, temp1.exe, temp2.exe and svchost.exe)
3) Clear all references to Copy.exe virus from Autorun.inf files on all drives or simply delete these files (please note, that this may stop some other useful autorun functionality of drives)
4) Delete subkeys under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 key which are created by Copy.exe file virus.
However you may solve this problem by using award winning program - True Sword – which can remove lsass.exe, lsass2.exe, lassa.exe and isass.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs. It scans hard disks and registry and destroys any manifestation of such malicious programs.
Tuesday, May 1, 2007
How to solve Generic Host Process Svchost.exe problem?
If you see the following error messages: "Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience"
or "svchost.exe -- application error the instruction at "0x745f2780" reference memory at "0x00000000" the memory could not be 'read'" or have problems with malicious svchost.exe running in processes, this post can be of interest for you as here you’ll find complete description and solution of this problem.
Generic Host Process for Win32 Services or svchost.exe is a legal and essential component of Windows which is used to host services which run from dynamic-link libraries (DLLs). Multiple instances of Svchost.exe can run at the same time. So it is not a problem in most cases if you see five or six or even more copies of svchost.exe running in your services because they host different groups of DLLs. However, there are several known spyware anв trojans that pretend to be legal svchost.exe. They usually have the same name or one of the following names: svchost.exe, svchosts.exe (which often causes svchosts.exe page faults), Generic.exe, svcchost.exe and several others. Please note that legal svchost.exe should reside in Windows\System32 folder and should not appear in startup list.
There are several possible reasons of this error message.
Reason 1: You have one of numerous worms, viruses and trojans which pretent themselves to be legal svchost.exe or use legal svchost.exe to run themselves at windows startup. These threats include: CashToolbar Downloader-MY, System1060, CoolWebSearch Svchost32, ADCLICK-AG, ADCLICK-AX, ADUYO-A, AGENT-V, AGOBOT-KL, AUTOTROJ-C and many others.
Reason 2: Some legal DLL which uses svchost.exe to run itself at Windows startup crashed and causec crash of the whole svchost.exe service.
Reason 3: You have just installed update from Microsoft which contains errorneous verison of Windows Installer or double-byte character set (DBCS) characters support (only occures in Microsoft Windows XP Service Pack 2 (SP2)).
Reason 4: You installed old printer or scanner drivers from Hewlett-Packard which are incompatible with the current version of svchost.exe
You can delete svchosts.exe or remove malicious svchost.exe and fix "Generic Host Process for Win32 Services has encountered a problem and needs to close" error and similar problems manually. To completely solve "Generic Host Process for Win32 Services" problem you should:
1) Scan your PC for the following viruses: CashToolbar Downloader-MY, System1060, CoolWebSearch Svchost32, ADCLICK-AG, ADCLICK-AX, ADUYO-A, AGENT-V, AGOBOT-KL, AUTOTROJ-C
2) Go to Windows Automatic Updates properties (right-click on My Computer, then click on Properties and switch to Automatic Updates tab)
3) Choose "Turn Off Automatic Updates", click OK and reboot your PC
4) Manually update Windows using "Windows Update" shortcut in the start menu
5) Turn automatic updates on
6) If your problem is not solved on this step, uninstall old Hewlett-Packard printer and scanner drivers (if any) and download new drivers from the manufactures web site
7) If your problem is not solved on this step, use the following command to show all svchost.exe instances and associated services or libraries:
tasklist /svc /fi "imagename eq svchost.exe"
Then search for each of services and libraries shown in that list in the Internet to find out whether the entry is malicious or not. In case you find malicious entry, use msconfig.exe utility to disable the appropriate service entry.
This is long but effective way of Generic Host Process or svchosts.exe repair.
However you can make use of a special program - True Sword - to remove svchosts.exe, svchost.exe, Generic.exe and svcchost.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds. True Sword scans your hard disks and registry and destroys any manifestation of such malicious programs.
or "svchost.exe -- application error the instruction at "0x745f2780" reference memory at "0x00000000" the memory could not be 'read'" or have problems with malicious svchost.exe running in processes, this post can be of interest for you as here you’ll find complete description and solution of this problem.
Generic Host Process for Win32 Services or svchost.exe is a legal and essential component of Windows which is used to host services which run from dynamic-link libraries (DLLs). Multiple instances of Svchost.exe can run at the same time. So it is not a problem in most cases if you see five or six or even more copies of svchost.exe running in your services because they host different groups of DLLs. However, there are several known spyware anв trojans that pretend to be legal svchost.exe. They usually have the same name or one of the following names: svchost.exe, svchosts.exe (which often causes svchosts.exe page faults), Generic.exe, svcchost.exe and several others. Please note that legal svchost.exe should reside in Windows\System32 folder and should not appear in startup list.
There are several possible reasons of this error message.
Reason 1: You have one of numerous worms, viruses and trojans which pretent themselves to be legal svchost.exe or use legal svchost.exe to run themselves at windows startup. These threats include: CashToolbar Downloader-MY, System1060, CoolWebSearch Svchost32, ADCLICK-AG, ADCLICK-AX, ADUYO-A, AGENT-V, AGOBOT-KL, AUTOTROJ-C and many others.
Reason 2: Some legal DLL which uses svchost.exe to run itself at Windows startup crashed and causec crash of the whole svchost.exe service.
Reason 3: You have just installed update from Microsoft which contains errorneous verison of Windows Installer or double-byte character set (DBCS) characters support (only occures in Microsoft Windows XP Service Pack 2 (SP2)).
Reason 4: You installed old printer or scanner drivers from Hewlett-Packard which are incompatible with the current version of svchost.exe
You can delete svchosts.exe or remove malicious svchost.exe and fix "Generic Host Process for Win32 Services has encountered a problem and needs to close" error and similar problems manually. To completely solve "Generic Host Process for Win32 Services" problem you should:
1) Scan your PC for the following viruses: CashToolbar Downloader-MY, System1060, CoolWebSearch Svchost32, ADCLICK-AG, ADCLICK-AX, ADUYO-A, AGENT-V, AGOBOT-KL, AUTOTROJ-C
2) Go to Windows Automatic Updates properties (right-click on My Computer, then click on Properties and switch to Automatic Updates tab)
3) Choose "Turn Off Automatic Updates", click OK and reboot your PC
4) Manually update Windows using "Windows Update" shortcut in the start menu
5) Turn automatic updates on
6) If your problem is not solved on this step, uninstall old Hewlett-Packard printer and scanner drivers (if any) and download new drivers from the manufactures web site
7) If your problem is not solved on this step, use the following command to show all svchost.exe instances and associated services or libraries:
tasklist /svc /fi "imagename eq svchost.exe"
Then search for each of services and libraries shown in that list in the Internet to find out whether the entry is malicious or not. In case you find malicious entry, use msconfig.exe utility to disable the appropriate service entry.
This is long but effective way of Generic Host Process or svchosts.exe repair.
However you can make use of a special program - True Sword - to remove svchosts.exe, svchost.exe, Generic.exe and svcchost.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds. True Sword scans your hard disks and registry and destroys any manifestation of such malicious programs.
How to solve error message "LSA shell has encountered an error"?
If you see the following error message "LSA shell has encountered an error" when you connect to the Internet and get 60 seconds countdown after which your PC performs shutdown or have malicious LSASS.exe "LSA shell export version" running in your processes, this post can be of interest for you as here you’ll find complete description and solution of this problem.
LSA (Local Security Authority) Shell is a legal and essential component of Windows which is used to control and validate logon for local and remote users in Windows NT, 2000, XP and.Vista. Logon is almost impossible if LSA Shell service is stopped or malfunctions. However, there are several known spyware and trojans that pretend to be legal lsass.exe. They usually have the same name or one of the following names: lsass.exe, lsass2.exe, lassa.exe, isass.exe and several others. Please note that legal lsass.exe should reside in Windows\System32 folder and should not appear in startup list.
In most cases this means that you have Sasser, W32.Blaster or Blaster32 virus on your PC. This virus causes LSA Shell and RPC (Remote Procedure Call) failure when you access the Internet. By default Windows shuts down PC in case of such failure. Shutdown is performed not immediately but in 60 seconds after failure for you to save your work. However, it is not enough to solve the problem. This standard behaviour of Windows can be changed. You can tell windows not to restart the whole PC but only service in case of RPC failure. This will give you enough time to solve the problem.
You can remove isass.exe or lsass.exe and fix "LSA Shell export version" and solve similar problems manually.
To completely solve "LSA shell has encountered an error" problem you should:
1) Open "services.msc"
2) Find all entries responsible for "Remote Procedure Call"
3) Change their recovery properties from "Shutdown Computer" to "Restart the Service" for all Failure counts ie. 1st, 2nd and subsequent.
4) Run anti virus scan to remove remains of Sasser or Blaster32 virus from your system
You can also temporarily stop reboot in case you see 60 seconds countdown warning by following these steps:
1) Select Start -> Run
2) Type "shutdown -a" and press Enter
If you are not sure which files and registry keys to delete you can make use of a special program True Sword and remove lsass.exe, lsass2.exe, lassa.exe and isass.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds.
LSA (Local Security Authority) Shell is a legal and essential component of Windows which is used to control and validate logon for local and remote users in Windows NT, 2000, XP and.Vista. Logon is almost impossible if LSA Shell service is stopped or malfunctions. However, there are several known spyware and trojans that pretend to be legal lsass.exe. They usually have the same name or one of the following names: lsass.exe, lsass2.exe, lassa.exe, isass.exe and several others. Please note that legal lsass.exe should reside in Windows\System32 folder and should not appear in startup list.
In most cases this means that you have Sasser, W32.Blaster or Blaster32 virus on your PC. This virus causes LSA Shell and RPC (Remote Procedure Call) failure when you access the Internet. By default Windows shuts down PC in case of such failure. Shutdown is performed not immediately but in 60 seconds after failure for you to save your work. However, it is not enough to solve the problem. This standard behaviour of Windows can be changed. You can tell windows not to restart the whole PC but only service in case of RPC failure. This will give you enough time to solve the problem.
You can remove isass.exe or lsass.exe and fix "LSA Shell export version" and solve similar problems manually.
To completely solve "LSA shell has encountered an error" problem you should:
1) Open "services.msc"
2) Find all entries responsible for "Remote Procedure Call"
3) Change their recovery properties from "Shutdown Computer" to "Restart the Service" for all Failure counts ie. 1st, 2nd and subsequent.
4) Run anti virus scan to remove remains of Sasser or Blaster32 virus from your system
You can also temporarily stop reboot in case you see 60 seconds countdown warning by following these steps:
1) Select Start -> Run
2) Type "shutdown -a" and press Enter
If you are not sure which files and registry keys to delete you can make use of a special program True Sword and remove lsass.exe, lsass2.exe, lassa.exe and isass.exe virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs in several seconds.
How to solve Spooler SubSystem App Error?
If you see the error message "Spooler SubSystem App has encountered a problem and needs to close. We are sorry for the inconvenience" or "Operation could not be completed. The print spooler service is not running" or "Spooler SubSystem App stopped working and was closed" this message will be of considerable use for you as here you’ll find out how to solve this problem.
Spooler SubSystem is a legal and essential component of Windows which is used to spool printer jobs. Printing is impossible if Spooler service is stopped or malfunctions. However, there are several known spyware and trojans that pretend to be legal Spooler SubSystem. They usually have the same name or one of the following names: spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe, SP00LSV.EXE (please notice that there are zeroes in this file name, not letters) and some others. Please note that legal spoolsv.exe should reside in Windows\System32 folder and should not appear in startup list.
What are the reasons of the error message "Spooler SubSystem App has encountered a problem and needs to close. We are sorry for the inconvenience"?
Reason 1: You have virus or trojan infection.
Reason 2: Spooler service was stopped by accident or is turned to Manual or Disabled mode.
Reason 3: You installed or tried to install printer driver which contains error or incompatibility with previous printer drivers installed in your system.
Reason 4: Print job and drawing instructions files (.shd and .spl files) were corrupted by accident which caused print que lock and as result - Spooler service crash.
You can fix "Spooler SubSystem App stopped working and was closed" and similar problems manually. To completely solve "Spooler SubSystem App" problem you should:
1) Scan your system for possible trojans or spyware including spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe or SP00LSV.EXE.
2) Stop Spooler service by executing "net stop spooler" command
3) Go to system Spool and printer's Temp directories (thу exact name of folder will vary from printer to printer) and delete all files with .shd and .spl extensions.
4) Delete all registry keys that contain information about printer's Job Queue. Please refer to your printer's manual and Microsoft web site to determine exact keys which contain information about printer jobs.
5) If you are trying to add printer and receive error message when trying to install printer drivers, this is right place to try adding printer again.
6) Start Spooler service by executing "net start spooler" command.
7) Reboot.
However you can use a special program - True Sword - to remove spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe or SP00LSV.EXE virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs.
Spooler SubSystem is a legal and essential component of Windows which is used to spool printer jobs. Printing is impossible if Spooler service is stopped or malfunctions. However, there are several known spyware and trojans that pretend to be legal Spooler SubSystem. They usually have the same name or one of the following names: spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe, SP00LSV.EXE (please notice that there are zeroes in this file name, not letters) and some others. Please note that legal spoolsv.exe should reside in Windows\System32 folder and should not appear in startup list.
What are the reasons of the error message "Spooler SubSystem App has encountered a problem and needs to close. We are sorry for the inconvenience"?
Reason 1: You have virus or trojan infection.
Reason 2: Spooler service was stopped by accident or is turned to Manual or Disabled mode.
Reason 3: You installed or tried to install printer driver which contains error or incompatibility with previous printer drivers installed in your system.
Reason 4: Print job and drawing instructions files (.shd and .spl files) were corrupted by accident which caused print que lock and as result - Spooler service crash.
You can fix "Spooler SubSystem App stopped working and was closed" and similar problems manually. To completely solve "Spooler SubSystem App" problem you should:
1) Scan your system for possible trojans or spyware including spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe or SP00LSV.EXE.
2) Stop Spooler service by executing "net stop spooler" command
3) Go to system Spool and printer's Temp directories (thу exact name of folder will vary from printer to printer) and delete all files with .shd and .spl extensions.
4) Delete all registry keys that contain information about printer's Job Queue. Please refer to your printer's manual and Microsoft web site to determine exact keys which contain information about printer jobs.
5) If you are trying to add printer and receive error message when trying to install printer drivers, this is right place to try adding printer again.
6) Start Spooler service by executing "net start spooler" command.
7) Reboot.
However you can use a special program - True Sword - to remove spoolsv.exe, spoolsu.exe, spoolsv0.exe, spoolso.exe or SP00LSV.EXE virus infection. True Sword will find and eliminate this problem and more than 180 000 other dangerous threats including trojans, spyware, adware, riskware, problemware, keyloggers, dialers and other kinds of malicious programs.
Subscribe to:
Posts (Atom)