Forum Home
Press F1
Thread ID: 95069	2008-11-23 09:37:00	Downloads folder that wont die	georgenz (11379)	Press F1

Post ID	Timestamp	Content	User
722216	2008-11-23 09:37:00	In My Documents I have a folder called My Downloads and one called 'Downloads'. I think I must have chosen to create the 'Downloads' folder at some stage within a program but it was in days of yore. I dont have any programs that I can see pointing to this folder (Downloads) anymore as they are pointing to traditional My Downloads folder - however the other one wont die. I delete it and it comes back, I rename it and it comes back .... any idea how I can find out how it is re-spawning and then how to kill it ..... gone! tks George	georgenz (11379)
722217	2008-11-23 09:55:00	It does sound like its attached to something - do you have any download managers. If you do , in the settings redirect the default location to someplace else. There could be some sort of spyware that was downloaded causing the return as well. Download Hijack this (www.trendsecure.com) save it ( not to the download folder :D ) then run and save a log file, copy / paste the complete log back here - lets see if anything nasty is lurking about. What OS do you have XP or Vista ?	wainuitech (129)
722218	2008-11-23 21:05:00	Tks, XP svc pack 3 Log attached:- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:03:48 a.m., on 24/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\ibmpmsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\S24EvMon.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\System32\QCONSVC.EXE C:\WINDOWS\System32\RegSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\WINDOWS\system32\TpShocks.exe C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe C:\Documents and Settings\George\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\WINDOWS\System32\1XConfig.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = https=192.168.4.1:8080;http=192.168.4.1:8080;ftp=1 92.168.4.1:8080;gopher=192.168.4.1:8080; R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ;<local> O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\sw g.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [TpShocks] TpShocks.exe O4 - HKLM\..\Run: [QCTRAY] C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\George\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - fpdownload2.macromedia.com O20 - AppInit_DLLs: avgrsstx.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: QCONSVC - IBM Corp. - C:\WINDOWS\System32\QCONSVC.EXE O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe -- End of file - 6482 bytes	georgenz (11379)
722219	2008-11-23 21:57:00	IE 7 Pro is redirecting your downloads. It includes a small / mini download manager (its built in) Thats what that My downloads folder belongs to. You can disable it by opening IE 7. Right mouse on IE 7 Pro's icon (bottom right) / preferences. Modules, untick Mini download manager. The log looks clean to me	Speedy Gonzales (78)
722220	2008-11-23 23:35:00	tks for that Speedy!!! george	georgenz (11379)
722221	2008-11-24 00:21:00	now that's confusing... reading the first post, it's the 'Downloads' folder that you were wanting to delete - Speedy is referring to what the 'My downloads' folder options are. So are both the folders still there?	bevy121 (117)
722222	2008-11-24 00:40:00	You didn't by chance have DAP installed at some point did you, georgenz? I have the same issue on the PC at home - DAP uninstalled many moons ago...	johcar (6283)
722223	2008-11-24 02:04:00	Umm no I'm not referring to the my downloads options. The folder is created if Mini download manager, is enabled in IE 7 Pro's preferences.	Speedy Gonzales (78)
722224	2008-11-24 07:23:00	Well that was interesting:- Un-installed IE7 Pro and thought that had solved the problem - No there it was again Restored IE8 back to scratch, did that solve the problme - No there it was again Made sure I ran CC cleaner and re-booted each time did that solve the problem - No there it was again Opened Chrome (yes I have that) and checked where it pointed (to My Downloads), but opening it (Chrome) appeared to cause the Download folder to re-appear. Aha I thought and deleted all the download History as surely that must solve the problem - NO!!! Un-installed Chrome and it seems the problem has been fixed :clap ...... its a mystery to me, guess I will go back to Firefox. george	georgenz (11379)
722225	2008-11-24 23:43:00	So it was the 'Download' folder, and not the 'My Downloads' folder you were trying to get rid of then. That's what I thought it was...	bevy121 (117)
1 2