♥ PosetteForever ♥

The Posetteforever diary - HELP!!!! my computer is nuts

TdaC [ Saturday, 05 March 2005, 08:32 PM ]
Post subject: HELP!!!! my computer is nuts

I have a problem with my computer. Since about some time back (don't know how long, but not that long) whenever i have internet on (i use explorer and i haven't had any problems using explorer). A little black box appears. It doesn't matter what site i visit, if i have internet up or not. If it's on the black box appears. The little black box looks like when you click on the icon your computer, then Autoexec. The only difference is that in the top of the box, when you open autoexec it says autoexec, when the little black box appears it says Dunkins~1. I know that autoexec starts when you start the computer and only then but i have know idea about dunkins~1, but i can hear the computer working when it appears. The little black box closes itself after about 15-20 secunds. After awhile it comes back and does the same thing. I tried to screencap it to show you, but only the pager under it appears, not the little black box. When i tried to close the program by using; Ctrl AltGr Delete, the box close program appeared and according to that the little black box is called windowsoldstartup. And it said windosoldstartup doesn't answer. I haven't installed anything, I haven't changed any settings. Norton antivirus doesn't find anything Adaware doesn't find anything, other than the usual Spyboot doesn't find anything. Firewall says everything is fine. Regclean doesn' find anything. Cleaning the discspace doesn't work Difragmentation didn't work. Empty tempfiles didn't work. I have no idea what else to do. HELP!!!!!!!

Tormie [ Saturday, 05 March 2005, 08:36 PM ]
Post subject:

When you see it appear run the task manager (ctrl-alt-canc) and see what's running. When you sighted it ti will be easy to find where it is... I'm making a little search on this Dunkins~1 but found nothing for now... <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" />

TdaC [ Saturday, 05 March 2005, 09:11 PM ]
Post subject:

where on the keyboard do i find canc?

TdaC [ Saturday, 05 March 2005, 09:13 PM ]
Post subject:

it says: winoldup

Landman [ Saturday, 05 March 2005, 09:24 PM ]
Post subject:

First, have alook at your autoexec.bat file in your system root. eg. C:Autoexec.bat. open it up with notepad and look for anything pertaining to Dunkins~1. **The tilda and then the number 1 is what happens when you have a filename in DOS longer then 8 characters.** when you find it, save a copy of it as autoexec.bak and then delete the entire line with the 'dunkins' in it. and then overwirte the original autoexec.bat file with the edited version you just edited. reboot and see what happens. be careful though and make sure you make that autoexec.bak backup copy so you can rename it from the command line if you run into any issues. if you delete the wrong line you could be causeing a driver not to load or something. you may want to brush up on REM statements before you do it as well. alternateivly you can choose not to execute the file on boot or troubleshoot it by clicking start then go to run and type 'msconfig' without quotes, and hit enter. that will give you the ability to select what starts and what doesn't during a boot.

Poserkatz [ Sunday, 06 March 2005, 12:33 AM ]
Post subject:

Usually the autoexec.bat is only for given the pc the info about language of your programversion and for which keyboard you use (codepage-infos). This Black Box seems to be a "dos"-program, but i'm not sure. Perhaps this program starts automatically with windows all the time. You can take a look to your win.ini-file. Open it with a texteditor. On the top so far you see something like this: [windows] load= run= NullPort=None device=Minolta PageWorks/Pro 18,QD4,LPT1: If you have an entry behind run= - that means, a program starts always if you start your PC and Windows. I have to know more, your infos unfortenately to less... Try to locate the program on your harddrive and try to look into the property-menu. Just some hurry thoughts about..., perhaps it will help.

Posy [ Sunday, 06 March 2005, 12:33 AM ]
Post subject:

No I don't think I can do take a look to your win. OK I will try to locate the program on your harddrive and try to look into the property-menu.

Anonymous [ Sunday, 06 March 2005, 03:27 AM ]
Post subject:

Automatic program execution is performed by autoexec.bat, autoexec.win, by being listed in the startup submenu, by being listed in the LOAD= or RUN= lines in win.ini, by the scheduler program, and settiing in the registery and perhaps by some other facilities. You will need to search each of these locations for the rouge program. To locate the executable itself, search all your drives including any network drives for dunkin*.* Pangor

ahjah [ Sunday, 06 March 2005, 04:47 AM ]
Post subject:

<blockquote class="quote"><div class="quote-user">TdaC";p="19258 wrote: </div><div class="post-text">where on the keyboard do i find canc?</div></blockquote> canc = del

TdaC [ Sunday, 06 March 2005, 10:40 AM ]
Post subject:

yes it's a dosprogram. I have search for dunkin and windowsoldup but the searchprogram can't find it. When i click start, run and type msconfig i can find autoexec.bat, but not open it...

Tormie [ Sunday, 06 March 2005, 11:48 AM ]
Post subject:

the autoexec.bat in int c:/ . You've to change the visualization (*sigh*) option of the directory to see it ! I've an italian version, it's difficult to suggest the right things to do...

Poserkatz [ Sunday, 06 March 2005, 11:57 AM ]
Post subject:

I think, you have "notepad" (the usual windows texteditor) on your harddrive. You can open the "autoexec.bat", "win.ini" and so on with a simple texteditor. The programstrings in these files are only text. You can read these files like other textdocs, similar to "view text" in an .cr2 or so. Hope that helps.

Posy [ Sunday, 06 March 2005, 11:57 AM ]
Post subject:

Why do you hope for that helps

TdaC [ Sunday, 06 March 2005, 02:21 PM ]
Post subject:

I hate to admit it, but i don't know that much about computers ( i'm blond you know). Could you sort of dumb it down for me. Like write it step by step what i can do. When i open autoexec in notepad it's very short/few lines, but the word dunkin isn't there.

Anonymous [ Sunday, 06 March 2005, 03:41 PM ]
Post subject:

Tormentor, in reguards to the MS-Dos/ and Windows FAT and VFAT file systems when you say "change the visualization", in American english it would be "change the hidden attribute". Or in the case of TdaC's situation, "remove the hidden attribute". Pangor

Tormie [ Sunday, 06 March 2005, 04:27 PM ]
Post subject:

It's not what I mean. I windows XP default you can't see the system files, you have to change the "visualization" , a folder's options

Anonymous [ Sunday, 06 March 2005, 10:17 PM ]
Post subject:

Oh, we are talking about XP.... I will stay on the sidelines and listen. Pangor

guiltypleasures [ Sunday, 06 March 2005, 10:41 PM ]
Post subject:

TdaC, don't listen to these computer geeks, what you need to do is take your computer off your desk, place it on a bare floor (no carpet) grab a tool box and remove the largest hammer you have it in, then with one swift blow smash the computer tower as hard as you can. After than if any large pieces are still there, take them out to the street and run over them with a heavy car or truck. Sweep up all pieces on your floor and the street with a good broom and dispose in garabage can. Now comes the important part...sneak into Tormies room while he's at work and look in his sock drawer and you will find his hidden "In case of an emergency" credit card, use this to buy yourself a nice new and better computer and then stop off at the liquor store and buy a bottle of their best booze of your choice and a bag of ice. Now go home relax and have a few drinks and tomorrow you can hook up your new computer <img src="https://www.posetteforever.com/images/smiles/smile.gif" alt="" />

Tormie [ Sunday, 06 March 2005, 10:53 PM ]
Post subject:

... <img src="https://www.posetteforever.com/images/smiles/eusa_shifty.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/eusa_shifty.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/eusa_shifty.gif" alt="" /> Where is my credit card <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> ?

guiltypleasures [ Sunday, 06 March 2005, 10:59 PM ]
Post subject:

The Mighty Zeus [ Monday, 07 March 2005, 01:56 AM ]
Post subject:

It's the gnomes I tell you. They are ratting out your hiding places.

TdaC [ Monday, 07 March 2005, 10:58 AM ]
Post subject:

GP i think i like your advice the best:) Sneaks into tormie's home ( he is at work now right?) and search for the emergency creditcard. Hey Posy do you know where tormie's creditcard is? <img src="https://www.posetteforever.com/images/smiles/eusa_whistle.gif" alt="" />

Posy [ Monday, 07 March 2005, 10:58 AM ]
Post subject:

You've got my full attention. What is your purpose in asking? I chat with people on the Web.

Landman [ Monday, 07 March 2005, 04:16 PM ]
Post subject:

inreference to pangor's comment about the file attributes. from a command line in any windows/dos environment the command is attrib -r -a -s -h "drive":"filename" where -r is readonly where -a is archive where -s is system file attribute and -h is hidden if you wish to set the attibute, change the - to a +

Landman [ Monday, 07 March 2005, 04:16 PM ]
Post subject:

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [drive:][path][filename] [/S [/D]] + Sets an attribute. - Clears an attribute. R Read-only file attribute. A Archive file attribute. S System file attribute. H Hidden file attribute. [drive:][path][filename] Specifies a file or files for attrib to process. /S Processes matching files in the current folder and all subfolders. /D Processes folders as well.

tda42 [ Monday, 07 March 2005, 10:52 PM ]
Post subject:

TdaC please read: The Dunkins~1. that you are talking about. A few questions. 1. Is it a dos window? 2. Is your OS Windows 98 SE? 3. Do you have Norton's and run past updates? I have for the first time seen that window come up when Norton's uploaded the updates to the PC as of today. I am running on a PC windows 98SE from my internet PC. <img src="https://www.posetteforever.com/images/smiles/eusa_shifty.gif" alt="" /> Landman can you check on this. I think this is either part of the upload or a Virus, New Spyware running threw the systems of some sort at this time. <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" />

Landman [ Monday, 07 March 2005, 11:08 PM ]
Post subject:

Kenny??? <img src="https://www.posetteforever.com/images/smiles/eusa_eh.gif" alt="" /> do you have "The Dunkins~1" now too? <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" />

guiltypleasures [ Monday, 07 March 2005, 11:37 PM ]
Post subject:

Oh my goodness, the dunkin's are over running posettforever! <img src="https://www.posetteforever.com/images/smiles/eusa_pray.gif" alt="" /> I think I know what this dunkin's is, it's a dunkin's donut virus, everyone get a glass of milk and follow me, we'll dunk it right out of our forum <img src="https://www.posetteforever.com/images/smiles/eusa_dance.gif" alt="" />

tda42 [ Tuesday, 08 March 2005, 02:31 AM ]
Post subject:

I like the chocolate cake ones with milk. <img src="https://www.posetteforever.com/images/smiles/lol.gif" alt="" /> Yes Land it came up while Nortons was doing the updates. Might not be anything except for Norton's software. But just in case it gets ugly, I have the milk in case. I'm going to run some checks on the system. <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" />

TdaC [ Tuesday, 08 March 2005, 06:49 AM ]
Post subject:

Oh no Kenny not you too <img src="https://www.posetteforever.com/images/smiles/crybaby2.gif" alt="" /> And 1. yes it's a doswindow 2. i run wondows 98. And i also have notorn (antivirus & firewall) that updates regularly......

TdaC [ Tuesday, 08 March 2005, 06:54 AM ]
Post subject:

I've asked the same question about Dunkins~1 on another site and this was the answer i got there: "Try renaming your autoexec.bat file to something like, autoexec1.bak. That should trick windows into thinking that there is no autoexec.bat. A better way of doing it would be to go to run on the start menu and type msconfig. Msconfig should give you the options to bypass autoexec.bat and the other start-up files. There is also a tab that should allow you to disable programs from launching at start-up. I also reccomend going to <a class="post-url" href="http://housecall.trendmicro.com" target="_blank">http://housecall.trendmicro.com.</a> It might catch viruses that other programs miss. Something about the names of the files you mentioned raise a red flag with me. I could be wrong about that, though. This site may help you with msconfig. <a class="post-url" href="http://netsquirrel.com/msconfig/" target="_blank">http://netsquirrel.com/msconfig/</a> "

TdaC [ Tuesday, 08 March 2005, 01:57 PM ]
Post subject:

I have now also run a virus program called AVG - it didn't find anything either. I was told at another site ( <a class="post-url" href="http://www.faeriewylde.com" target="_blank">www.faeriewylde.com</a> - you have to be a memeber to read the forums there) to uninstall norton. But i'm not sure about that....

Poserkatz [ Tuesday, 08 March 2005, 02:59 PM ]
Post subject:

Sorry, i don't have Norton, so i don't can help. My little web search about dunkin~1 has no results... except: Dunkins Donoughts <img src="https://www.posetteforever.com/images/smiles/biggrin.gif" alt="" /> and it seems to me, in "Wizard of Oz" they are Dunkins. Perhaps gnomes??? Really? <img src="https://www.posetteforever.com/images/smiles/eusa_shhh.gif" alt="" />

tda42 [ Tuesday, 08 March 2005, 03:28 PM ]
Post subject:

I also have a ~df6ec5.tmp in my Windows temp file that cannot be removed and I am thinking this is a problem as well. Started up in safe mode and deleted the temp folder with the file in question and restarted and it is back in the folder so it clones itself. <img src="https://www.posetteforever.com/images/smiles/eusa_doh.gif" alt="" /> This is not good. Thilda you might want to go off line and uninstall Norton's and it's files and see if the Dukin~1 is still there. Reinstall Nortons and see if that helped the problem. I am thinking about doing this as well. I am thinking this maybe spyware. I have Cyber Srub and removed it that way but it came back on start up. What a bummer. <img src="https://www.posetteforever.com/images/smiles/crybaby2.gif" alt="" />

Tormie [ Tuesday, 08 March 2005, 06:27 PM ]
Post subject:

<img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> I saerached on the net too but found nothing, you can search for it in the registry, type "regedit" in a dos windows and search for "dunkin"

tda42 [ Tuesday, 08 March 2005, 09:29 PM ]
Post subject:

Land the file in the temp keeps changing. It has changed it's name to ~df15fe.tmp. I for one have not seen a file like that. It seems to change with the PC fresh boot on start up. Nortons does not have access to look at it and note pad will not open it. Safe mode will delete the temp folder but clne on start up to replace it with something else. It can't be moved to the desktop but it can be duplicated to the desktop. <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" />

TdaC [ Tuesday, 08 March 2005, 10:02 PM ]
Post subject:

Kenny i don't have that temp file <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> I did google dunkins~1 but it didn't find it ( the first thing google found was a site with the discription "brazillian asses videogallery", somehow i don't think that is going to help). <img src="https://www.posetteforever.com/images/smiles/eusa_wall.gif" alt="" />

Tormie [ Tuesday, 08 March 2005, 10:04 PM ]
Post subject:

<blockquote class="quote"><div class="quote-nouser">Quote:</div><div class="post-text"> the first thing google found was a site with the discription "brazillian asses videogallery", </div></blockquote> (Tormie goes to google... <img src="https://www.posetteforever.com/images/smiles/droll2.gif" alt="" /> )

Posy [ Tuesday, 08 March 2005, 10:04 PM ]
Post subject:

When was this exactly?

Tormie [ Tuesday, 08 March 2005, 10:05 PM ]
Post subject:

guiltypleasures [ Tuesday, 08 March 2005, 10:28 PM ]
Post subject:

<img src="https://www.posetteforever.com/images/smiles/lmao.gif" alt="" /> Might not help your computer problems but I'm sure Tormie will feel much more relaxed tonight <img src="https://www.posetteforever.com/images/smiles/eusa_dance.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/biggrin.gif" alt="" />

Tormie [ Tuesday, 08 March 2005, 11:24 PM ]
Post subject:

Landman [ Tuesday, 08 March 2005, 11:40 PM ]
Post subject:

Kenny, go here and run the free virus scan to see if you are infected with anything... <a class="post-url" href="http://www3.ca.com/securityadvisor/" target="_blank">http://www3.ca.com/securityadvisor/</a> Let me know how you make out. I wouldn't worry about that temp file right now as windows processes use that temp file as well as Internet Explorer in some versions of Windows 98

TdaC [ Wednesday, 09 March 2005, 12:47 AM ]
Post subject:

Hi all i might have solved the problem. First off i wrote the name wrong in the forum here. The black box is called ducins~1 and not dunkins~1. Secondly from what i've now read it is a problem with norton and not a virus. Found this on a q&a page: "Symantec have now confirmed that this is a LiveUpdate problem. One cause being if LiveUpdate is trying to update a Symantec application which is no longer present, such as might happen where say a user attempted to install NIS2005 over NAV2004, fails and returns to just using NAV. Symantec's "fix" is to uninstall everything and start-over. "

tda42 [ Wednesday, 09 March 2005, 01:25 AM ]
Post subject:

It happened so fast that I thought it said ~dunkins 1. on the does window. I had thought that it might be Norton's but there is so many vast areas to look and trouble shoot. (Kenny notices traffic on the site has increased from upload.) <img src="https://www.posetteforever.com/images/smiles/eusa_think.gif" alt="" /> Tormie quit uploading the Brazillian ass videos. <img src="https://www.posetteforever.com/images/smiles/eusa_naughty.gif" alt="" /> <img src="https://www.posetteforever.com/images/smiles/lmao.gif" alt="" />

Tormie [ Wednesday, 09 March 2005, 10:18 AM ]
Post subject: