https://www.posetteforever.com/viewtopic.php?f=34&t=1312 ----------------------------------- TdaC Saturday, 05 March 2005, 08:32 PM HELP!!!! my computer is nuts ----------------------------------- I have a problem with my computer. Since about some time back (don't know how long, but not that long) whenever i have internet on (i use explorer and i haven't had any problems using explorer). A little black box appears. It doesn't matter what site i visit, if i have internet up or not. If it's on the black box appears. The little black box looks like when you click on the icon your computer, then Autoexec. The only difference is that in the top of the box, when you open autoexec it says autoexec, when the little black box appears it says Dunkins~1. I know that autoexec starts when you start the computer and only then but i have know idea about dunkins~1, but i can hear the computer working when it appears. The little black box closes itself after about 15-20 secunds. After awhile it comes back and does the same thing. I tried to screencap it to show you, but only the pager under it appears, not the little black box. When i tried to close the program by using; Ctrl AltGr Delete, the box close program appeared and according to that the little black box is called windowsoldstartup. And it said windosoldstartup doesn't answer. I haven't installed anything, I haven't changed any settings. Norton antivirus doesn't find anything Adaware doesn't find anything, other than the usual Spyboot doesn't find anything. Firewall says everything is fine. Regclean doesn' find anything. Cleaning the discspace doesn't work Difragmentation didn't work. Empty tempfiles didn't work. I have no idea what else to do. HELP!!!!!!! ----------------------------------- Tormie Saturday, 05 March 2005, 08:36 PM ----------------------------------- When you see it appear run the task manager (ctrl-alt-canc) and see what's running. When you sighted it ti will be easy to find where it is... I'm making a little search on this Dunkins~1 but found nothing for now... :-k ----------------------------------- TdaC Saturday, 05 March 2005, 09:11 PM ----------------------------------- where on the keyboard do i find canc? ----------------------------------- TdaC Saturday, 05 March 2005, 09:13 PM ----------------------------------- it says: winoldup ----------------------------------- Landman Saturday, 05 March 2005, 09:24 PM ----------------------------------- First, have alook at your autoexec.bat file in your system root. eg. C:Autoexec.bat. open it up with notepad and look for anything pertaining to Dunkins~1. **The tilda and then the number 1 is what happens when you have a filename in DOS longer then 8 characters.** when you find it, save a copy of it as autoexec.bak and then delete the entire line with the 'dunkins' in it. and then overwirte the original autoexec.bat file with the edited version you just edited. reboot and see what happens. be careful though and make sure you make that autoexec.bak backup copy so you can rename it from the command line if you run into any issues. if you delete the wrong line you could be causeing a driver not to load or something. you may want to brush up on REM statements before you do it as well. alternateivly you can choose not to execute the file on boot or troubleshoot it by clicking start then go to run and type 'msconfig' without quotes, and hit enter. that will give you the ability to select what starts and what doesn't during a boot. ----------------------------------- Poserkatz Sunday, 06 March 2005, 12:33 AM ----------------------------------- Usually the autoexec.bat is only for given the pc the info about language of your programversion and for which keyboard you use (codepage-infos). This Black Box seems to be a "dos"-program, but i'm not sure. Perhaps this program starts automatically with windows all the time. You can take a look to your win.ini-file. Open it with a texteditor. On the top so far you see something like this: [windows] load= run= NullPort=None device=Minolta PageWorks/Pro 18,QD4,LPT1: If you have an entry behind run= - that means, a program starts always if you start your PC and Windows. I have to know more, your infos unfortenately to less... Try to locate the program on your harddrive and try to look into the property-menu. Just some hurry thoughts about..., perhaps it will help. ----------------------------------- Posy Sunday, 06 March 2005, 12:33 AM ----------------------------------- No I don't think I can do take a look to your win. OK I will try to locate the program on your harddrive and try to look into the property-menu. ----------------------------------- Visitor Sunday, 06 March 2005, 03:27 AM ----------------------------------- Automatic program execution is performed by autoexec.bat, autoexec.win, by being listed in the startup submenu, by being listed in the LOAD= or RUN= lines in win.ini, by the scheduler program, and settiing in the registery and perhaps by some other facilities. You will need to search each of these locations for the rouge program. To locate the executable itself, search all your drives including any network drives for dunkin*.* Pangor ----------------------------------- ahjah Sunday, 06 March 2005, 04:47 AM ----------------------------------- [quote="TdaC";p="19258"]where on the keyboard do i find canc?[/quote] canc = del ----------------------------------- TdaC Sunday, 06 March 2005, 10:40 AM ----------------------------------- yes it's a dosprogram. I have search for dunkin and windowsoldup but the searchprogram can't find it. When i click start, run and type msconfig i can find autoexec.bat, but not open it... ----------------------------------- Tormie Sunday, 06 March 2005, 11:48 AM ----------------------------------- the autoexec.bat in int c:/ . You've to change the visualization (*sigh*) option of the directory to see it ! I've an italian version, it's difficult to suggest the right things to do... ----------------------------------- Poserkatz Sunday, 06 March 2005, 11:57 AM ----------------------------------- I think, you have "notepad" (the usual windows texteditor) on your harddrive. You can open the "autoexec.bat", "win.ini" and so on with a simple texteditor. The programstrings in these files are only text. You can read these files like other textdocs, similar to "view text" in an .cr2 or so. Hope that helps. ----------------------------------- Posy Sunday, 06 March 2005, 11:57 AM ----------------------------------- Why do you hope for that helps ----------------------------------- TdaC Sunday, 06 March 2005, 02:21 PM ----------------------------------- I hate to admit it, but i don't know that much about computers ( i'm blond you know). Could you sort of dumb it down for me. Like write it step by step what i can do. When i open autoexec in notepad it's very short/few lines, but the word dunkin isn't there. ----------------------------------- Visitor Sunday, 06 March 2005, 03:41 PM ----------------------------------- Tormentor, in reguards to the MS-Dos/ and Windows FAT and VFAT file systems when you say "change the visualization", in American english it would be "change the hidden attribute". Or in the case of TdaC's situation, "remove the hidden attribute". Pangor ----------------------------------- Tormie Sunday, 06 March 2005, 04:27 PM ----------------------------------- It's not what I mean. I windows XP default you can't see the system files, you have to change the "visualization" , a folder's options ----------------------------------- Visitor Sunday, 06 March 2005, 10:17 PM ----------------------------------- Oh, we are talking about XP.... I will stay on the sidelines and listen. Pangor ----------------------------------- guiltypleasures Sunday, 06 March 2005, 10:41 PM ----------------------------------- TdaC, don't listen to these computer geeks, what you need to do is take your computer off your desk, place it on a bare floor (no carpet) grab a tool box and remove the largest hammer you have it in, then with one swift blow smash the computer tower as hard as you can. After than if any large pieces are still there, take them out to the street and run over them with a heavy car or truck. Sweep up all pieces on your floor and the street with a good broom and dispose in garabage can. Now comes the important part...sneak into Tormies room while he's at work and look in his sock drawer and you will find his hidden "In case of an emergency" credit card, use this to buy yourself a nice new and better computer and then stop off at the liquor store and buy a bottle of their best booze of your choice and a bag of ice. Now go home relax and have a few drinks and tomorrow you can hook up your new computer :) ----------------------------------- Tormie Sunday, 06 March 2005, 10:53 PM ----------------------------------- ... 8-[ 8-[ 8-[ Where is my credit card :-k ? ----------------------------------- guiltypleasures Sunday, 06 March 2005, 10:59 PM ----------------------------------- :-s 8-[ :-k [-( :-? :whistle: ----------------------------------- The Mighty Zeus Monday, 07 March 2005, 01:56 AM ----------------------------------- It's the gnomes I tell you. They are ratting out your hiding places. ----------------------------------- TdaC Monday, 07 March 2005, 10:58 AM ----------------------------------- GP i think i like your advice the best:) Sneaks into tormie's home ( he is at work now right?) and search for the emergency creditcard. Hey Posy do you know where tormie's creditcard is? :whistle: ----------------------------------- Posy Monday, 07 March 2005, 10:58 AM ----------------------------------- You've got my full attention. What is your purpose in asking? I chat with people on the Web. ----------------------------------- Landman Monday, 07 March 2005, 04:16 PM ----------------------------------- inreference to pangor's comment about the file attributes. from a command line in any windows/dos environment the command is attrib -r -a -s -h "drive":"filename" where -r is readonly where -a is archive where -s is system file attribute and -h is hidden if you wish to set the attibute, change the - to a + ----------------------------------- Landman Monday, 07 March 2005, 04:16 PM ----------------------------------- ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [drive:][path][filename] [/S [/D]] + Sets an attribute. - Clears an attribute. R Read-only file attribute. A Archive file attribute. S System file attribute. H Hidden file attribute. [drive:][path][filename] Specifies a file or files for attrib to process. /S Processes matching files in the current folder and all subfolders. /D Processes folders as well. ----------------------------------- tda42 Monday, 07 March 2005, 10:52 PM ----------------------------------- TdaC please read: The Dunkins~1. that you are talking about. A few questions. 1. Is it a dos window? 2. Is your OS Windows 98 SE? 3. Do you have Norton's and run past updates? I have for the first time seen that window come up when Norton's uploaded the updates to the PC as of today. I am running on a PC windows 98SE from my internet PC. 8-[ Landman can you check on this. I think this is either part of the upload or a Virus, New Spyware running threw the systems of some sort at this time. :-k ----------------------------------- Landman Monday, 07 March 2005, 11:08 PM ----------------------------------- Kenny??? :-s do you have "The Dunkins~1" now too? :-k ----------------------------------- guiltypleasures Monday, 07 March 2005, 11:37 PM ----------------------------------- Oh my goodness, the dunkin's are over running posettforever! :pray: I think I know what this dunkin's is, it's a dunkin's donut virus, everyone get a glass of milk and follow me, we'll dunk it right out of our forum :dancing: ----------------------------------- tda42 Tuesday, 08 March 2005, 02:31 AM ----------------------------------- I like the chocolate cake ones with milk. :lol: Yes Land it came up while Nortons was doing the updates. Might not be anything except for Norton's software. But just in case it gets ugly, I have the milk in case. I'm going to run some checks on the system. :-k ----------------------------------- TdaC Tuesday, 08 March 2005, 06:49 AM ----------------------------------- Oh no Kenny not you too :crybaby: And 1. yes it's a doswindow 2. i run wondows 98. And i also have notorn (antivirus & firewall) that updates regularly...... ----------------------------------- TdaC Tuesday, 08 March 2005, 06:54 AM ----------------------------------- I've asked the same question about Dunkins~1 on another site and this was the answer i got there: "Try renaming your autoexec.bat file to something like, autoexec1.bak. That should trick windows into thinking that there is no autoexec.bat. A better way of doing it would be to go to run on the start menu and type msconfig. Msconfig should give you the options to bypass autoexec.bat and the other start-up files. There is also a tab that should allow you to disable programs from launching at start-up. I also reccomend going to http://housecall.trendmicro.com. It might catch viruses that other programs miss. Something about the names of the files you mentioned raise a red flag with me. I could be wrong about that, though. This site may help you with msconfig. http://netsquirrel.com/msconfig/ " ----------------------------------- TdaC Tuesday, 08 March 2005, 01:57 PM ----------------------------------- I have now also run a virus program called AVG - it didn't find anything either. I was told at another site ( www.faeriewylde.com - you have to be a memeber to read the forums there) to uninstall norton. But i'm not sure about that.... ----------------------------------- Poserkatz Tuesday, 08 March 2005, 02:59 PM ----------------------------------- Sorry, i don't have Norton, so i don't can help. My little web search about dunkin~1 has no results... except: Dunkins Donoughts :bigrinnin: and it seems to me, in "Wizard of Oz" they are Dunkins. Perhaps gnomes??? Really? :-$ ----------------------------------- tda42 Tuesday, 08 March 2005, 03:28 PM ----------------------------------- I also have a ~df6ec5.tmp in my Windows temp file that cannot be removed and I am thinking this is a problem as well. Started up in safe mode and deleted the temp folder with the file in question and restarted and it is back in the folder so it clones itself. #-o This is not good. Thilda you might want to go off line and uninstall Norton's and it's files and see if the Dukin~1 is still there. Reinstall Nortons and see if that helped the problem. I am thinking about doing this as well. I am thinking this maybe spyware. I have Cyber Srub and removed it that way but it came back on start up. What a bummer. :crybaby: ----------------------------------- Tormie Tuesday, 08 March 2005, 06:27 PM ----------------------------------- :-k :-k :-k I saerached on the net too but found nothing, you can search for it in the registry, type "regedit" in a dos windows and search for "dunkin" ----------------------------------- tda42 Tuesday, 08 March 2005, 09:29 PM ----------------------------------- Land the file in the temp keeps changing. It has changed it's name to ~df15fe.tmp. I for one have not seen a file like that. It seems to change with the PC fresh boot on start up. Nortons does not have access to look at it and note pad will not open it. Safe mode will delete the temp folder but clne on start up to replace it with something else. It can't be moved to the desktop but it can be duplicated to the desktop. :-k ----------------------------------- TdaC Tuesday, 08 March 2005, 10:02 PM ----------------------------------- Kenny i don't have that temp file :-k I did google dunkins~1 but it didn't find it ( the first thing google found was a site with the discription "brazillian asses videogallery", somehow i don't think that is going to help). ](*,) ----------------------------------- Tormie Tuesday, 08 March 2005, 10:04 PM ----------------------------------- [quote] the first thing google found was a site with the discription "brazillian asses videogallery", [/quote] (Tormie goes to google... :droll2: ) ----------------------------------- Posy Tuesday, 08 March 2005, 10:04 PM ----------------------------------- When was this exactly? ----------------------------------- Tormie Tuesday, 08 March 2005, 10:05 PM ----------------------------------- 8-[ 8-[ 8-[ ----------------------------------- guiltypleasures Tuesday, 08 March 2005, 10:28 PM ----------------------------------- :lmao: Might not help your computer problems but I'm sure Tormie will feel much more relaxed tonight :dancing: :bigrinnin: ----------------------------------- Tormie Tuesday, 08 March 2005, 11:24 PM ----------------------------------- :oops: :oops: :oops: ----------------------------------- Landman Tuesday, 08 March 2005, 11:40 PM ----------------------------------- Kenny, go here and run the free virus scan to see if you are infected with anything... http://www3.ca.com/securityadvisor/ Let me know how you make out. I wouldn't worry about that temp file right now as windows processes use that temp file as well as Internet Explorer in some versions of Windows 98 ----------------------------------- TdaC Wednesday, 09 March 2005, 12:47 AM ----------------------------------- Hi all i might have solved the problem. First off i wrote the name wrong in the forum here. The black box is called ducins~1 and not dunkins~1. Secondly from what i've now read it is a problem with norton and not a virus. Found this on a q&a page: "Symantec have now confirmed that this is a LiveUpdate problem. One cause being if LiveUpdate is trying to update a Symantec application which is no longer present, such as might happen where say a user attempted to install NIS2005 over NAV2004, fails and returns to just using NAV. Symantec's "fix" is to uninstall everything and start-over. " ----------------------------------- tda42 Wednesday, 09 March 2005, 01:25 AM ----------------------------------- It happened so fast that I thought it said ~dunkins 1. on the does window. I had thought that it might be Norton's but there is so many vast areas to look and trouble shoot. (Kenny notices traffic on the site has increased from upload.) :-k Tormie quit uploading the Brazillian ass videos. [-X :lmao: ----------------------------------- Tormie Wednesday, 09 March 2005, 10:18 AM ----------------------------------- 8-[ ... How...? :oops: :oops: :oops: