Computer Support Forum

Cant find/remove detected adware_memwatcher; Slow system & internet; JRE webapps slow

Question: Cant find/remove detected adware_memwatcher; Slow system & internet; JRE webapps slow

Thanks guys, I haven't done this in awhile so please bear with me...

After an older system of mine seemed to suddenly slow down and a current Symantec scan came up with nothing I ran Housecall on my system. Housecall found Adware_aeropopups and Adware_memwatcher before Housecall itself slowed down to nothing and died. I could not use Housecall to clean the malware/spyware cookies. I ran the Java Housecall plug-in; not the ActiveX. I then ran defrag and that helped some for the system so it seemed. However, the internet is stll quite slow on many occasions.

I ran Hijackthis and have pasted the log below along with a few system details. I only see GoogleDesktop in the log below as a potential problem. Please help! Everything else seems normal to my untrained eye. I will try adaware next if it is still free to use.

I'm running Windows XP Pro SP3 and IE 7.0.5730.11
I run Symantec Norton AV and have installed Avast in an effort to access another AV library. I know they will conflict from time to time and will remove one of them later.
Processor x86 Family 15 Model 2 Stepping 7 GenuineIntel ~2400 Mhz
Total Physical Memory 1,024.00 MB
Available Physical Memory 364.39 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 2.41 GB
Page File C:\pagefile.sys
************************************************

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:03 AM, on 1/1/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\Program Files\Airtel\NetXpert\bin\sprtcmd.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Plaxo\3.17.0.16\PlaxoHelper_en.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Airtel\NetXpert\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Documents and Settings\All Users\Application Data\U3\U3Launcher\LaunchU3.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\JEFFERY SMITH\Desktop\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.yahoo.com/config/logi...intl=us&.bypass=&.partner=&pkg=&stepid=&.done=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [nxpclient] C:\Program Files\Airtel\NetXpert\bin\sprtcmd.exe /P nxpclient
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,[email protected]
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,[email protected]
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,[email protected]
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\3.17.0.16\PlaxoHelper_en.exe -a
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NOMAD Detector] "C:\Program Files\Creative\SBAudigy\PlayCenter2\CTNMRun.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PlaxoSysTray] C:\Program Files\Plaxo\3.17.0.16\PlaxoSysTray.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: LaunchU3.exe.lnk = ?
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: SmartUI.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.skillport.com
O15 - Trusted Zone: *.skillsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{433D1CCD-E229-4B0B-8353-166CF1164898}: NameServer = 202.56.215.6,202.56.215.54
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SupportSoft Sprocket Service (nxpclient) (sprtsvc_nxpclient) - SupportSoft, Inc. - C:\Program Files\Airtel\NetXpert\bin\sprtsvc.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\SupportSoft\bin\ssrc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
--
End of file - 13733 bytes

More replies
Relevance 100%
Preferred Solution: Cant find/remove detected adware_memwatcher; Slow system & internet; JRE webapps slow

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 77.49%

My system has been very slow for the last 24 hours. Startup was slow. Programs not loading. Even the google home page wasn't loading properly.

I restarted my router and the issues seem to be better but I think there is still a malware issue in the background somewhere.

Please help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:32:13, on 14/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Adobe\Adobe Version Cue C... Read more

More replies
Relevance 77.08%

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:25:10 PM, on 4/12/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Cisco\Cisco NAC Agent\NACAgentUI.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\TrueSuite Access Manager\FpNotifier.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\TrueSuite Access Manager\PwdBank.exe
C:\Program Files\TrueSuite Access Manager\usbnotify.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\TrueSuite Access Manager\CssSvr.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Spybot - Search ... Read more

More replies
Relevance 76.26%

Hello,
I have an XP Home pc that's experiencing slow internet and slow OS. I also had a problem with Comcast mail. They put a block on my account saying it was sending bulk mail when I didn't even know it was doing that. They mentioned it could be spyware. Any help would be greatly appreciated. Thanks!!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 6:36:57 PM, on 12/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\s... Read more

Answer:Solved: Slow XP system & slow internet HJT Included

Anyone have a chance to look at this? Sorry, I know you guys are busy......
 

3 more replies
Relevance 75.03%

Attached is my HJT log file. The machine has just been so slow these past few days. Slow internet and the processor is constantly being loaded. Fan is always running and pop ups all the time. Appreciate the help

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:16:26 AM, on 3/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cepstral\bin\CepstralLicSrv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\digtizer.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wirel... Read more

Answer:Slow Internet, Pop ups and slow system performance

Hi Welcome to TSG!!

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

With malware infections being as they are today, it's strongly recommended to have the Windows Recovery Console pre-installed on your machine before doing any malware removal.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Go to Microsoft's website => http://support.microsoft.com/kb/310994

Select the download that's appropriate for your Operating System


Download the file & save it as it's originally named.
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.

Please note once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall.

Drag the setup package onto ComboFix.exe and drop it.

Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.

At the next prompt, click 'Yes' to run the full ComboFix scan.

When the tool is finished, it ... Read more

1 more replies
Relevance 74.62%

I guess I fit all my problems into the topic title there.
Running Avast! antivirus and it found the Spigot Search Protection and said I should remove it, but every time I restart it's right there again to say I should remove it.
Thanks for the help!

Answer:Very slow, lagging and "Spigot Search Protection" detected but can't remove.

 Download Malwarebytes from here http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/ , get it up to date and do a scan.  When it finishes, click Quarantine all and follow the onscreen instructions.  
 
Good luck.

21 more replies
Relevance 74.62%

Ad-Aware detects VX2 and WurldMedia on my computer but can't remove or quarantine either. I already tried Spybot S&D, Ad-Aware, CounterSpy, SuperAntiSpyware, ATF-Cleaner, XoftSpy and HijackThis but to no avail. When I used XoftSpy SE, the viruses no longer showed up on Ad-Aware scans, but I know it's still on the comptuer because my computer runs awefully slow. AVG Antivirus also detected a threat with the file 2BEC090Ad01 inside Local Settings\Firefox\Profiles\gn7th1z6.default\Cache folder. My desktop also had a shortcut named "1" which I assume the virus generated. Please help?

HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 8:15:20 PM, on 7/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:... Read more

Answer:VX2 and WurldMedia detected but can't remove. Computer running dreadfuly slow.

Umm..anyone?

2 more replies
Relevance 73.39%

Hello,
I got a message today about "Windows 7 has detected my system is slow and want me to select Basic theme instead of the Aero" btw I can play my games fine, benchmarks scores are normal, system prime95 20hours stable.

my system spec:
Q9550
HD4890 cat9.6
4GB
X-Fi
W7 x64 RTM 7600

Answer:Windows 7 has detected my system is slow

you have a [email protected] graphics card - your wei graphics rating should be about 7.5

what is your rating? and have you tried the 9.7 drivers?

7 more replies
Relevance 72.16%

Hello all!
 
My laptop is running really really REALLY slowly lately.  I haven't downloaded anything new but when I look at my task manager I see so many things running.  I don't want to go in and just start deleting things b/c I am sure I would end up deleting something important.  Tried to run windows update and it didn't run   Every time I try and do anything ( Especially online) pages don't load, pc freezes, it is really frustrating. Any help is appreciated

More replies
Relevance 71.75%

I have been receiving an error message that says 'Microsoft Visual C++ Runtime Library' in the message title and then 'Buffer overrun detected' in Internet Explorer. I also have been experiencing slower system performance. I have Spybot and have run it several times, deleting the same programs multiple times. I have Windows XP on a HP Pavilion dv8000 laptop. Any help would be great.
 

Answer:'Buffer overrun error detected' pop up and slow system

Please, I need help!
 

1 more replies
Relevance 71.75%

(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files... Read more

Answer:computer slow to boot, slow response, very slow internet, fans on high - HJT log

Any thoughts, anybody?

catillac said:


(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft... Read more

1 more replies
Relevance 71.75%

My computer is unusually slow and it takes up to 10-15 minutes just for my computer to completely start up.

Here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:34:18 AM, on 12/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files... Read more

More replies
Relevance 71.75%

Been having problems for a week or so in that pages take forever to load.Have been doing all the usual checks-Adware,Spybot and have a Sunbelt Personalfirewall running but nothing has been picked up so ran Trend Micro Housecheck and it detected Adware_Memwatcher .This has supposedly been removed however the problem still exists.Here is the Hijack this logfileLogfile of Trend Micro HijackThis v2.0.2Scan saved at 7:18:53 PM, on 3/04/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\Program Files\Java\jre1.6.0_03\bin\jusched.exeC:\Program Files\Analog Device... Read more

Answer:Pages Load Very Slowly-adware_memwatcher Detected

Apologies for my lackof patience but what sort of time does it take to get a reply.Thanks

3 more replies
Relevance 71.75%

Hi there, recently I have been getting slow internet and download speeds at a later time in the day, when there is 3 or 2 internet connections that show up in my connections. one being mine virgin broadband, another sky and Bthomehub, whenever these connections are up my download speed on steam goes from 1.1mb/s to 250kb/s and i get the message from windows saying' 'windows has detected ip conflict'' I can still access the internet play games online fine, but my download speed is really slow and sometimes internet is slow aswell, its been happening for a while now and its starting to get annoying that it happens at the same time almost everyday.
 

Answer:windows has detected ip conflict slow internet

9 more replies
Relevance 71.75%

Hi all,I realized that my internet (8 mbps) acts slow after an hour of usage. It is completely fine if I do a restart, though. I called my ISP, they said that the Upload rate was very slow, not the download rate. This, along with a panda scan, has led me to believe that something is hindering my computer. Please help, any amount will be greatly appreciated. HJT and panda scan logs follow:_____________________________HJT Log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:57:41 AM, on 1/19/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\NOD32 Antivirus\ekrn.exeC:\Program Files\Goog... Read more

Answer:Slow Internet, Viruses/malware Detected.

Welcome to the BleepingComputer HijackThis Logs and Analysis forum. My name is Richie and i'll be helping you to fix your problems.Apologies for the late response,as i'm sure you can appreciate we are extremely busy.If you've already recieved help at another forum and your issues have been resolved,or you're presently recieving help elsewhere then please let us know.If you have not followed the info in the link below prior to posting your log then please do so now:Preparation Guide for use before posting a HijackThis Log:http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/If you still require help,please post a new Hijackthis log into this topic in your next reply.Also post a detailed description of the issues you're experiencing.*Note*Post all reports/logs directly into this topic,not as attachments,thanks.

1 more replies
Relevance 71.75%

I tried a search to see if I could find my problem and nothing seems to really fit. I have defragmented and ran disc clean-up, I have also ran complete spyware & virus scans, (I have CA Security Suite). Now that I have told you everything (that I can think of) that I've tried so far; here is/are my problems:
My computer starts up extremly slow, once it's started it's now showing that it's low on virtual memory at line such & such (it's rarely the same). Right before I wrote this it said it was adding more virtual memory so that may have fixed this particular issue but is there a way that I can add more virtual memory if/when I get this error? I'm sure I have too many if not ALL programs running when I start my computer; I need to know how to find what is starting at "start up" and where I can change to not start unless I start it manually. I have looked in "start up" and it shows that nothing is starting and I know that can't be right. I've tried checking the task manager and under the first tab it doesn't show anything that I don't know about; however under processes there is a huge list of stuff that I only know what about a handful of stuff is...is this where I need to look?

I also have a bunch of stuff that shows up on my add/remove programs list that I'm not sure of what it is; some things look like they're there twice. I am virtually computer illeterate (meaning the "code"... Read more

Answer:Comp running slow; need to find & remove programs not needed

16 more replies
Relevance 71.34%

First,

Thank you for all of your efforts in providing this service! It is much appreciated. Now, on to my issue..

A couple of days ago, my PC started to behave really strange and became very slow. My McAffee popped up a notice saying that the Trojan "vundo" was detected, and it looked like it tried to clean the file, but it said "clean failed".

I installed PC Tools Internet Security that day after searching for something that could remove the dreaded "vundo", and installed and ran the scans. It found the "vundo" (called virtumonde), and promptly quarantined it.

Everything seemed fine until this morning, when after sitting idle for the weekend, my PC would not boot in Normal mode. I eventually got it to boot in Safe mode, where I ran a scan and noticed that the "vundo" was back!

I have followed the instructions on this forum, and here is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:35:22 PM, on 2008/10/14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_Watchdog.exe
C:\WINDOWS\system32\spo... Read more

Answer:System is slow and won't boot - Virtumonde Trojan detected, keeps reappearing

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

If you're not receiving help elsewhere, and still require assistance for this issue, and since it has been a few days since you first posted, please do this:
Download RSIT by random/random and Save it to your Desktop.
Double-click RSIT.exe to run the tool.
Click Continue at the disclaimer screen.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Please copy/paste the contents of log.txt and info.txt in your next reply.
------------------------------------------------------

13 more replies
Relevance 70.93%

For some odd reason, in the past 4 weeks, my streaming video has become VERY slow, and I do not know why. I have a high-speed cable connection, the same I have had for the past 6 months. It is slow, sound-with-stil-images and/or constantly rebuffering, and this is true with WIndows Media, Winamp, Realplayer and even Flash videos (on YouTube for example). I cannot take it anymore. I tried this Hijackthis thing, and this is my log:

Logfile of HijackThis v1.99.1
Scan saved at 3:58:08 PM, on 7/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Sophos\Remote Update\cachemgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\sophos\remote update\imonitor.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sophos SWEEP for NT\S... Read more

Answer:Slow internet, slow video streaming, slow computer... aaaaah!

Please, somebody.
 

2 more replies
Relevance 70.93%

A couple weeks ago I surfed a site with a lot of pop up ads and my internet started slowing down. I ran windows Defender and it detected Trojan: js/tracur.f and three of the Java/CVE exploit family members (java/cve-2011-3544 is the only one I remember and I didn't record them before removal). Defender was able to remove all of them, and later MBAM threat scans and Windows defender full scans detected nothing, but my internet is still slow. I use the latest edition of Google Chrome and often times it either takes a long time to load a page, or the page takes multiple reloads and sometimes just killing the page and reloading from there to get it to load. Just about everywhere on the net acts like this, it doesn't seem linked to anywhere specific. And when I download stuff on Steam, the download speed rarely stays above 600 Kb/s and frequently drops below one hundred, or into the bytes/sec range. Usually it can reliably get up to 700 Kb/s or more, and rarely drops below 200 Kb/s, if even there.
 
Can anyone tell me what's going on?

Answer:js/tracur.f was detected and removed, but internet is still slow and unreliable

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

8 more replies
Relevance 70.52%

Okay I'm going to do a full PC check but all my systems seem fine as of yesterday. A little background to help others help me I'm on a Windows Small Business Server 2003 environment with no other server connection but one machine, I have 3 shared drives created on the server and am running Shared Point Services 2.0 as well and all my computers on the network have a login script assigned to them when booting onto the network so their drives are automatically mapped. Oh and I have POS old Sony laptop running as a proxy using Winproxy 5.0, but it has about a gig of speed and 512 RAM and the connection goes: in from the outside, to the proxy, line directly to server, server assigns ISP's by DHCP internally.

My computer is a Dell Optiplex 2600
P4 2.0 gig
512 meg PC 2700 333 meg RAM
onboard graphics and soundcard

Here's a question to start from another thread I posted: About two months back or so I noticed if I put cd's into my PC at work I must have downloaded a rootkit or something because now I cannot play some cd's that I can play on my home computer and others in the office. Now in the future is is safer to burn MP3's on an external harddrive and listen that way or avoid Sony cd's?

Now to the problem, I put in a burned cd this morning it starts up WMP 10 fine and I'm listening to Back in Black then all of a sudden my computer freezes. Crashes my financial program which I think nothing of because I am using Master Builder 11.2 by ... Read more

Answer:Solved: Operating system and programs going slow, slow, slow now

11 more replies
Relevance 70.11%

System is 2Ghz P4 with 512 MB memory. XP PRo Version 2002 SP2 patches up to date.AVG Anti Virus and Anit Spyware installedSpybot and Ad-Aware installed and run regularlyDisk has been defragged, and ran checkdskI have followed all the steps in the preparation guide.Spybot and Ad-Aware eliminated a bunch of tracking stuff, but bit defender etc didn't find anything.Here is the Hijackthis log.Thanks for your help.Logfile of HijackThis v1.99.1Scan saved at 12:11:38 AM, on 3/22/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\brss01a.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\Brmfrmps.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\BRMFRSMG.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\WINDOWS\SOUNDMAN.EXEC:\... Read more

Answer:System Slow, But Can't Find Anything Wrong

Hello bongo jerry, I am SifuMike and I will be helping you. First, we will check for malware. Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update. Updating Java: Download the latest version of Java Runtime Environment (JRE) 6. Scroll down to where it says "Java Runtime Environment (JRE) 6". Click the "Download" button to the right. Check the box that says: "Accept License Agreement". The page will refresh. Click on the link to download Windows Offline Installation, Multi-language jre-6-windows-i586.exe and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions. Reboot your computer once all Java components are removed. Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.****************** Disable your antivirus program and go here http://www.bitdefender.com/scan8/ie.html and run an online scan with BitDefender (you will need to use Internet Explorer for this scan). When the ActiveX Control has loaded, click on "Click here to scan". This scan ... Read more

2 more replies
Relevance 70.11%

Hi, I used CCcleaner, MBAM, ADWcleaner, JRT and ESET. The log for ADWcleaner is here": # AdwCleaner v4.102 - Report created 30/11/2014 at 15:45:58# Updated 23/11/2014 by Xplode# Database : 2014-11-23.7 [Local]# Operating System : Windows 7 Starter (32 bits)# Username : NM - NM-PC# Running from : C:\Users\NM\Downloads\AdwCleaner.exe# Option : Scan ***** [ Services ] *****  ***** [ Files / Folders ] ***** File Found : C:\Users\NM\AppData\Roaming\Mozilla\Firefox\Profiles\eu5tkewl.default-1414670487525\user.jsFolder Found : C:\Users\NM\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl ***** [ Scheduled Tasks ] *****  ***** [ Shortcuts ] *****  ***** [ Registry ] ***** Key Found : HKLM\SOFTWARE\DeviceVMKey Found : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16421  -\\ Mozilla Firefox v33.1 (x86 en-US)    # AdwCleaner v4.102 - Report created 30/11/2014 at 16:25:43# Updated 23/11/2014 by Xplode# Database : 2014-11-23.7 [Local]# Operating System : Windows 7 Starter (32 bits)# Username : NM - NM-PC# Running from : C:\Users\NM\Downloads\AdwCleaner.exe# Option : Clean ***** [ Services ] *****  ***** [ Files / Folders ] *****  ***** [ Scheduled Tasks ] *****  ***** [ Shortcuts ] *****  ***** [ Registry ] ***** Ke... Read more

Answer:PUP and PUA detected plus Slow computer/internet, Need a complete check on comp

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/558464 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

21 more replies
Relevance 69.7%

my computer is to slowI lost links to favoriteswindows XP browsing is very slow, pictures do not open very often at allPlease helpRegardsHenryk

Answer:computer to slow, slow performanece, slow internet browsin

When posting a problem on any forum details are needed. This link will help you with that: http://www.computing.net/howtos/sho...

5 more replies
Relevance 69.7%

Running older PC Clone 2.0 Ghz Dual CPU Pentium, 1GB Ram Win XP Home Edition system.

While navigation on Internet Explorer or Google Chrome, system runs extrememly slow and/or crashes. When using applications such as Itunes, Email, or simply opening up Word and other applications, it runs very slow and almost seems to stop. The IE7 that was on the computer had changed to an operate with add-ons off as a result of the infection. I downloaded and reinstalled IE7 and this seems to have fixed that problem for the time being. MalwareBytes and SuperAntiSpy icons dissappeared from my desktop. When trying to use them from the Start / Menu options the programs no longer worked. I reinstalled them and they appear to work fine now. However, the system still seems to run very slow over all and its performance is greatly hindered.

Next, I ran free version of SuperAntiSpyware and all it detected was a couple Adware cookies. Secondly, I ran free version of Malware Bytes Anti-Malware and it detected PUP.GamePlayLab infections located in the Registry Key: HKLM\SOFTGWARE\Microsoft\Windows.... These files were removed and quarantined by MWB. Thirdly, I ran Old Timer's TFC and then rebooted the computer and it appeared to run a little faster, but still sluggish while using IE7. So, finally, I ran ESET Free Online Scanner, and it detected "Win32/Toolbar.Babylon and Win32/TopMedia.a" virus infections. Scan took about 2 1/2 hours. I set it to search the drives/ar... Read more

Answer:Computer runs Slow, Internet slow, Applications slow

Hello, lets look a bit more.Please DownloadTDSSkillerLaunch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.>>>>>>>>Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well.>>>>>>> Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.Finally...MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of Hos... Read more

15 more replies
Relevance 69.7%

Hi-

This is the first time I've ever posted something. Generally, I do my own research and then fix the issue, but I'm at a loss. So, any help is greatly appreciated. btw - I did not download anything (to my knowledge).

Issues:
1) Extremely slow system - When monitoring my system performance, it is almost always maxed out (even when only running Firefox).
2) When I click on "My Computer" - nothing will show up and it just shows Windows "Searching"
3) My Wireless Network is no longer working - I guess I may need to re-install the driver
4) When I restart or shut-down, I get an error with the following (Wireless; Power Tray; and something else...will post when I do it again)
5) My system tray does not seem to load all applications - At least I'm thinking so.

What I've done:
1) Updated version and ran virus scan from symatec
2) Updated version and ran virus scan for malwareadbytes Anti-Malware
3) Ran Autorun Eater
4) And now I have the Hijackthis log

Any idea what my issue may be??? I appreciate the help.

HJ Log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:45:09 PM, on 1/10/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program... Read more

More replies
Relevance 69.29%

So lately my internet on my desktop has been running pretty slow, with unusual amounts of popups constantly interrupting. My desktop is pretty old, running on windows xp, but my laptop recently died because of trojans. A-squared had detected trojans and when I tried to quarantine it I guess I damaged an essential file or something because now my windows won't start up on the laptop. Anyways, similar thing has been happening on my desktop and a-squared detected a two high risk files named something like kuang2 and backdoor something (obviously I'm not very computer literate). Anyways here's the hijackthis log. I didn't try to do anything with the trojans this time in case I ended up killing my desktop as well. I'm not sure what other information you guys need, just let me know if you need anything else. Thanks!

---------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:50 PM, on 4/18/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:... Read more

Answer:Kuang2? slow internet, constant popups, trojans detected via a-squared

bump*
thx in advance
 

1 more replies
Relevance 69.29%

AVG detected Trojan horse SHeur3.BCYW
and after that internet speed went from 3.0 mbs to 0.3 mbs

I've done cut cleaner
virus scans and found nothing unusual other than the regular cookie warnings

Answer:trojan horse Sheur3.BCYW detected and then super slow internet

Hello. I guess you have XP here.Let's run FakeAlert Stinger. Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected... Read more

4 more replies
Relevance 68.88%

Sorry for the lag. I was travelling, but am back on line now.HAVe performed all tasks as outlined in closed post[/b]Bit Defender Log - attached as HTML file - couldn't cut and paste sorryAVG Anti SPyware ReportAVG Anti-Spyware - Scan Report--------------------------------------------------------- + Created at: 12:28:24 PM 4/7/2007 + Scan result: :mozilla.138:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.139:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.140:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.141:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.142:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.178:C:\Documents and Settings\user1\Application Data\Mozilla\Firefox\Profiles\ozaydds5.default\cookies... Read more

Answer:Reopen Request - System Slow, But Can't Find Anything Wrong

Hi bongo jerry,Download CCleaner and install it. (default location is best). Do not run it yet! CCleaner Tutorial*******************************************In Normal Mode, select the following with HijackThis. With all windows (including this one!) closed (close browser/explorer windows), please select "fix.? These are optional fixes. The following are not necessarily spyware/malware, but I suggest you place a check mark next to the following entries, as these programs may be taking up system resources.O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE (Description: System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel. Removing this entry will free up a small amount of system resources. )O4 - HKLM\..\Run: [SunJavaUpdateSched] \"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe\" (Description: Sun Java update scheduler. Checks for updates. Not necessary. Removing this entry will free up a small amount of system resources.)********************************************NOTE* CCleaner deletes EVERYTHING out of temp/temporary folders and does not make backups. Let's empty the temp files: Run CCleaner. DO NOT use the "Issues" block . It's ment for professionals. 1. Starting with v1.27.260, CCleaner installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation.IF you do NOT want it, REMOVE ... Read more

2 more replies
Relevance 68.47%

Hi guys, my system has been infected for the last few weeks and I can't seem to get it all back to norm. I have read many posts and have tried different software, but I know some bad things still remain. Here is my HJT log. Thanks

Logfile of HijackThis v1.99.1
Scan saved at 6:52:32 PM, on 7/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\GlobalSCAPE\CuteFTP Server\cftpstes.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\WINDOWS\System32\MsPMSPSv... Read more

Answer:Solved: System slow down..can't remove problems.

16 more replies
Relevance 67.65%

I've never seen it run so slow before. It takes it's sweet ass time loading websites, loading programs, EVERYTHING! Can someone take a look at this log and tell me if I've missed something, and what I can do or try to do to fix this.Thank you in advance.Logfile of HijackThis v1.99.1Scan saved at 12:20:25 AM, on 7/6/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Analog Devices\SoundMAX\SMTray.exeC:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.ex... Read more

Answer:Help! Slow Computer, Slow Internet. Slow, Slow, Slow!

Hi MaryJane,Sorry for the delay, this forum is really swamped right now. I don't see any positive signs of malware in your log, although there is one thing that I am unsure about. I'll get to that in a minute.Before we do rootkit scans and use some other tools to confirm that malware is not the problem, let's do a quick check of resources.Press <Ctrl>-<Alt>-<Del> to open Task Manager, then click on the Processes tab. Place a check next to Show processes from all users. Note the numbers at the bottom, CPU usage should be running at 0 to no more than five percent if your system is idle (no background tasks running). If that is not the case, scroll down and see if any of the processes is running at a high percentage of CPU usage. On a normal system at idle the System Idle Process should show about 98 percent, meaning nothing else is using the CPU. The next columns to the right, memory usage and peak memory usage, may also show something out of line if one process is using a large amount of memory. If you see anything showing high CPU usage or high Memory usage, make a note of it.Now, click the Performance tab. The key numbers here are in the Commit Charge box -- The Total and Peak figures; and in the Physical Memory box, the Total figure. Make a note of these three numbers. I would like to see them, but I can tell you what I'm looking for: basically, any time the Commit Charge exceeds the total physical memory, Windows will have to constantly swap d... Read more

17 more replies
Relevance 67.24%

First my startup became slow, than all aplications were slow, and now my internet. i usea router and the same internet is faster on my laptop but its slow in my current computer here is a hijackthis logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:20:32 AM, on 8/21/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgnsx.exeC:\WINDOWS\system32\SearchIndexer.exeC:\Program Files\Canon\CAL\CALMAIN.exeC:\WINDOWS\system32\dllhost.exeC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\SOUNDMAN.EX... Read more

Answer:Slow Computer, Slow Start up, Slow Internet

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

5 more replies
Relevance 67.24%

Good Afternoon
 
I have just been informed to post my post here instead.
I am still learning this platform, so I wish to not anger the administrators, as I greatly thank you all.
 
 

Slow Internet: Removing ZeroAccess rootkit
 
Please find the logs below from the Farbar Recovery Scan Tool (FRST)
 
FRST Log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-04-2015 04
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Wondershare) C:\Program Files\Common... Read more

Answer:Slow Internet: Remove ZeroAccess rootkit

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.start

CloseProcesses:

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (No File)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rickey Lee\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll No File
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rickey Lee\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll No File
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rickey Lee\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll No File
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rickey Lee\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll No File
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rickey Lee\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll No File
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C... Read more

2 more replies
Relevance 65.6%

Hello,
 
I'm running Windows Vista Home Premium SP2.  My browser (IE9) has been hijacked and so far I've been unable to get rid of the problem with AVG, Malwarebytes, AdAware, and Spybot.  Have run scans with all of these, and my internet access is still very slow and IE is randomly redirected to undesired pages.  Here is the log file from HijackThis.  Any help would be greatly appreciated.
 
Thank you.
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 11:06:38 PM, on 6/27/2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16490)
Boot mode: Normal
Running processes:
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
C:\Program Files\Maxtor\OneTouch\Utils\OneTouch.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe
C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe
C:\Windows\sttray.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe
C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe
C:\Program Files\AVG SafeGuard toolbar\vprot.exe
C:\Program Files\iTunes\iTunes... Read more

Answer:Unable to remove malware - slow internet access and hijacked IE

Hello d442rm I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", t... Read more

14 more replies
Relevance 65.19%

Hi guys, well i reformatted and its been ok but just lately my siystem is taking a little bit longer than usual to respond etc and my internet is taking like 16+ secs to open a page lol.. i dont know wots wrong so if you can help me i`d appreciate it..

Logfile of HijackThis v1.99.1
Scan saved at 9:33:39 AM, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADA.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe... Read more

More replies
Relevance 65.19%

Hi,

We have a 4mbps unlimited connection and the internet speed is good in one system out of two. the connection in one alone is very slow i mean dead slow....................Can someone please help me soon, i have many project related stuff to download and execute................

Am posting the speed test in speedtest.net below...............

Answer:Internet slow in one system alone

Posting a tracert for yahoo.com.....................

C:\WINDOWS>tracert yahoo.com

Tracing route to yahoo.com [72.30.2.43]
over a maximum of 30 hops:

1 1 ms <1 ms 1 ms 192.168.1.1
2 21 ms 25 ms * ABTS-mum-Dynamic-001.72.169.122.airtelbroadband.
in [122.169.72.1]
3 * * * Request timed out.
4 20 ms 21 ms 21 ms 125.18.13.137
5 * 269 ms 270 ms AES-Static-122.36.144.59.airtel.in [59.144.36.12
2]
6 * 272 ms 271 ms yahoo.com.any2ix.coresite.com [206.223.143.195]

7 281 ms 281 ms 281 ms xe-5-1-1.pat2.sjc.yahoo.com [216.115.96.46]
8 * 282 ms 279 ms ae-1-d431.msr2.sk1.yahoo.com [216.115.106.167]
9 * 279 ms 280 ms te-8-1.bas-k1.sk1.yahoo.com [68.180.160.9]
10 283 ms 278 ms 278 ms ir1.fp.vip.sk1.yahoo.com [72.30.2.43]

Trace complete.

4 more replies
Relevance 65.19%

For the past few weeks I've been trying to solve internet problems that have been affecting just one of my computers. I think this originally started when I was forced to reset my router to factory default. No other system on the network seems to have been affected.

The current problem with my computer is that sometimes the internet connection will slow down by a lot for a few minutes. Much of the time it's normal speed, for for periods of a few minutes it will slow down to essentially nothing, but won't actually go out completely. When I try to load web pages under these conditions, my browser (all of them) just sits there loading nothing forever, but won't actually give me a "connection lost" screen. Also, it might only be me, but the connection drops seem to get much worse late at night. I've tried just about every solution I can think of and can't even figure out exactly what the problem is.

The computer is a desktop on wireless. I don't think can move it to a place where there's a wired connection.
System Specs:
Dell XPS 420
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista&#8482; Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz, x64 Family 6 Model 15 Stepping 11
Processor Count: 4
RAM: 3069 Mb
Graphics Card: AMD Radeon HD 6800 Series, 1024 Mb
Hard Drives: C: Total - 289828 MB, Free - 43946 MB; D: Total - 15359 MB, Free - 5389 MB; G:... Read more

Answer:Slow Internet On One System Only

6 more replies
Relevance 65.19%

Edit by bjgarrick: Inline HJT log removed. READ & RUN ME sticky not followed.

 

Answer:slow system& internet

Welcome to Major Geeks, jpeters220

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.



If something does not run, write down the info to explain to us later but keep on going.
Do not assume that because one step does not work that they all will not.
READ & RUN ME FIRST. Malware Removal Guide

Notes:


If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Links are given in the Step 2: Installing Tools and Running Scans section for downloading the definitions for the MBAM & SAS scanners. Then copy them to the problem PC. Yes, you could use a flash drive too but flash drives are writeable and infections can spread to them.

Here's a guide on how to attach the logs HOW TO: Attach Items To Your Post
 

1 more replies
Relevance 64.78%

My laptop was attacked by Cyberlog-X (which opens htepo link) last week and I followed the forums used COmbofix, VundoFix and used avg antivirus to remove. It was able to remove the cyberlog and i am not getting any htepo links. When I ran the spybot I still get Virtumonde, Zedo and others but spybot is unable to clean it.
I ran hijackThis and I am posting the log. Please help me to remove the spyware and my laptop is really slow.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:02:18 PM, on 11/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TFNF5.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WI... Read more

Answer:Solved: Spyware attack System running slow Unable to remove (HijackThis log posted)

16 more replies
Relevance 64.37%

Norton 360 shows no viruses. When I boot up computer, programs in system tray are slow to load. Also, on first attempt only, Internet Explorer 8 takes 2-3 seconds .. after that, it loads faster. Not sure what's causing this. Please help, and thank you in advance!Logfile of Trend Micro HijackThis v2.0.4Scan saved at 7:04:07 PM, on 12/8/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16671)Boot mode: NormalRunning processes:C:\Windows\vVX6000.exeC:\Program Files (x86)\Upromise\dca-ua.exeC:\Program Files (x86)\Upromise\UpromiseTray.exeC:\ProgramData\FLEXnet\Connect\11\ISUSPM.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exeC:\Users\David\AppData\Local\Autobahn\mlb-nexdef-autobahn.exeC:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXEC:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exeC:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exeC:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exeC:\Program Files\Logitech\SetPoint\x86\SetPoint32.exeC:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exeC:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeC:\Program Files (x86)\... Read more

Answer:Computer slow to load programs in system tray, and slow to boot IE8 only on first time

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for postin... Read more

2 more replies
Relevance 64.37%

I have been reviewing the forum and seen that this is typically caused by a virus. The person reporting the problem was asked to download "Hijack This" and run it. Then post the results. I have done this and was hoping someone could help me with my problem. Below are the results from running "Hijack This".

Thanks in advance !

Logfile of HijackThis v1.97.2
Scan saved at 6:09:18 PM, on 9/27/2003
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\IntegraTelecom\cvpnd.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Slave.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\nutsrv4.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINNT\system32\taskmgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Daddy\My Documents\My Received Files\Hijackthis\HijackThis.exe

R0 ... Read more

Answer:System slow and Internet shuts down

7 more replies
Relevance 64.37%

My laptop becomes very slow when connected to internet. It keeps updating OS. Internet access becomes very slow. Is any solution to it?

More replies
Relevance 64.37%

I believe I'm infected with some sort of malware but cannot determine what might be the cause. Can some take a look a my current HJT log to determine if in fact I've been infected?

Logfile of HijackThis v1.99.1
Scan saved at 2:46:06 PM, on 9/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\Explorer.EXE
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINNT\system32\igfxtray.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINNT\system32\hkcmd.exe
C:\WINNT\GWMDMMSG.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\wscntfy.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcod... Read more

More replies
Relevance 64.37%

Computer slow and getting unresponsive pages in Chrome
Hope someone can help me
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 8139 Mb
Graphics Card: Intel(R) HD Graphics Family, -250 Mb
Hard Drives: C: Total - 928006 MB, Free - 361561 MB; D: Total - 21598 MB, Free - 2329 MB; E: Total - 4054 MB, Free - 1098 MB;
Motherboard: Hewlett-Packard, 17FC
Antivirus: Kaspersky Internet Security, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:19:08 PM, on 9/23/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
C:\Program Files (x86)\Lexmark S600 Series\lxedmon.exe
C:\Program Files (x86)\Lexmark S600 Series\ezprint.exe
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
C:\Users\Gina\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gina\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program File... Read more

Answer:system slow and internet not responsive

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 64.37%

Hey guys basicly went to a warez website got a file and opened it and bam at this for 10 hours and still cant get rid of the virus and log online.
So i had to put old hard drive in and boot up online.
this file is loading wscntfy.exe , but still keeps coming up when i stop/term the process.
This file didn't load before, now it does. system is slow.
I run a scan with avg, nothing found. Kaspersky found alot of files but all but 2 were password protected. So i manually deleted files.
Spybot , nothing found.
will be right back with hijack log.
BRB
 

Answer:Internet dead and system slow

16 more replies
Relevance 64.37%

About a week ago... went to a site and computer hiccuped. My Norton Corp came up and said that I had a trojan virus. Deleted it and moved on. Normally, this process always has worked. I rebooted it for another reason that night and when Windows XP started my whole taskbar, start menu, and clock are all strange looking. Best way to describe it is that it looks all blocky and like Windows 95. Also noticed that I have no internet. Tried to flush everything out with Your Uninstaller! and clearing internet history. Went into the my startup programs and nothing seemed different. Ran MalwareBytes, came up with one small "eBay" adware. Erased it and moved on. Norton came up with nothing else.

I normally can get out of any jam I get myself in, except for this one.

Anyone have any ideas for a newbie?

Thanks in advance!

James

Answer:Why is my system so slow and looking like Windows 95? Where is my internet?

I have the exact same problem.

4 more replies
Relevance 64.37%

Please help. I'm desperate. For the past couple of weeks, I've been getting strange errors. 99% of the time internet explorer cannot display the webpage. Right now I'm in safe mode. I've tried to run a hijack this log and I get an error also - "for some reason your system denied write access to the hosts file... Here's a copy of the log. Thanks in advance.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:59:32 PM, on 12/6/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Safe mode with network support

Running processes:
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://ww... Read more

Answer:System really slow, cannot connect to internet

16 more replies
Relevance 64.37%

Hello, last week the computer when booted simply went to a blue screen and said something along the lines of (INACCESSIBLE_BOOT_DEVICE) sinse then I have used the win 2k disk to repair the system. The computer now boots correctly but very slowly. I have followed recommended steps to remove viruses and malware, by turning off tea timer from S&D spybot, then installing SUPERanti spyware, Malawarebytes antimalware, installing CCleaner, and finally Hijackthis. I did full system scans with the three programmes mentioned above and they found a trojan vundo, which has now been deleted. Unfortuantly the computer is still running very slowly and the internet like a snail. The computers log showed some very strange messages which mean little to me other than red crosses and caution signs usually mean bad things. Attached the logs from the various programmes listed above, I would appreciate suggestions.
 

Answer:Solved: Win 2k system and internet very slow

Internet still super slow, used to be super quick on this PC, just had a scenario where all programes that were open were non responsive I could toggle between the various programmes but they would not respond opened up IE fine but as soon as open it would not respond. Restarted PC all working ok again.
 

3 more replies
Relevance 64.37%

Hi,

My system and particularly internet connection has suddenly started to go really slow.

It isn't as bad when I run it through IE rather than firefox but I would like to understand why and resolve the issue. There is a program called booster web which I cannot seem to get rid of. I have even uninstalled firefox but it's still there.

I've attached my HJT log if you guys could have a look and advise what to do, I would be very grateful. If you would prefer to me post the log within the post let me know.

Thanks.
Gareth.
 

Answer:Slow system and internet - HJT log attached

Click on this link to download : ADWCleaner Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop. Do not click on any links in the top Advert.

See the screenshot where the proper download buttons are highlighted
NOTE: If using Internet Explorer and you get an alert that stops the program downloading click on Tools > Smartscreen Filter > Turn off Smartscreen Filter then click on OK in the box that opens. Then click on the link again.

Close your browser and double click on this icon on your desktop:

You will then see the screen below, click on the Scan button (as indicated), accept any prompts that appear and allow it to run, it may take several minutes to complete, when it is done, you will get a message saying "PENDING" , Ignore that & click on the Clean button, accept any prompts that appear and allow the system to reboot. You will then be presented with the report, Copy & Paste it into your next post.
Please note: the newer versions of Adwcleaner have a pretty colour display on some versions of windows and slightly different icons. The screenshots are from the older version but are basically the same
 

1 more replies
Relevance 64.37%

hi everyone,

i have a new pc about three months old, the internet is too slow on my system but other users on my home network are having a fast connection. i have laid the blame on the pc tool internet security software that i was using, i had to uninstall it and install kaspersky internet security yet the problem gets worst. but when i connect it to school server, i get a faster connection. however the home network we use is sky unlimited internet, i am worried that other people are having a faster browsing than me.

pls i need your help. thank you.

Ebuka
 

Answer:Internet connection too slow on my system

Take a look at this and see if this helps any
http://www.delete-computer-history.com/slow-internet-connection.html
 

11 more replies
Relevance 64.37%

I'm facing a problem while starting up my laptop. It takes nearly 10 mins for the laptop to start. Also, the internet too takes approximately same time to start..

Please help
 

Answer:slow system & internet startup

Hello and welcome to TSG.
 

2 more replies
Relevance 63.96%

have read the forum but just really unclear as to which path I need to take.....

using XP, and when I open up Outlook 2003 the system sometimes does not recognize Word as the editor......then gets really slow.

I would like to completely clean my system and rid myself of any programs that have found their way on the computer that start up when the computer does......

I have gone to the System Start up menu and see a host of programs I am not familar with starting up but dont know much of what to do from this point

if you are able to provide assistance for this issue it is greatly appreciated

thank you,

John
 

Answer:System Slow down - Outlook really slow, not recognizing Word as editor

anybody have any ideas?
it went away for a while and is back again....no rythme or reason??
 

2 more replies
Relevance 63.96%

Re HP Envy Notebook 2016 Windows 10 64 bit Creator Update April 2017As soon as I did the latest Windows 10 (64 bit} Ver 1703 Build 16179.1000 called Creator Update, crazy things began to happen.* Lost 0 key on notebook keyboard*Lost Colon key on keyboard* Lost Question Mark on keyboard* Slow boot up* Slow System performance on fast notebook HP Envy I7 16G Ram 1T hard drive*WiFi connection acts up when first connecting* Bluetooth not functioning nowNo malwareNo virus-Anti Virus working fineAny help would be greatly appreciated. I love this notebook . Smily Face.

More replies
Relevance 63.55%

New here - joined cuz I had Poison.Ivy trojan (that I thought I manually removed months ago) but things haven't been the same since. Ran several free tools and finally purchased SpyDoctor - but only low to medium bugs are found while running full scans. I just ran Combofix (which I guess I should have waited til told - sorry) and here is the Log.txt findings: ComboFix 10-07-11.03 - owner 07/11/2010 14:48:38.1.1 - x86Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.594 [GMT -6:00]Running from: c:\documents and settings\owner\Desktop\ComboFix.exeAV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\windows\system32\drivers\qyxhqjg.sys.((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))).-------\Service_qyxhqjg((((((((((((((((((((((((( Files Created from 2010-06-11 to 2010-07-11 ))))))))))))))))))))))))))))))).2010-07-11 18:01 . 2010-07-11 18:03 -------- dc-h--w- c:\windows\ie82010-07-08 03:26 . 2010-07-08 03:26 -------- d-sh--w- c:\documents and settings\owner\IECompatCache2010-06-25 17:16 . 2010-06-25 17:16 -------- d-sh--w- c:\documents and settings\owner\PrivacIE2010-06-25 17:14 . 2010-06-25 17:14 -------- d-sh--w- c:\documents and s... Read more

Answer:Had Poison.Ivy trojan now system and Internet slow

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 63.55%

Hello,

I am using Windows XP and a few days ago I was browsing the internet when my computer re-booted suddenly. When Windows was started again I received a message informing me that the system had recovered from a serious error. Everything is working fine now, except my internet is now only working at about 1/20 the speed is was before.

Any help in this matter would be greatly appreciated,
Thank you.
 

Answer:System recoverd from serious error and now internet is very slow

Issue resolved
 

3 more replies
Relevance 63.55%

For some reason my system is running extremely slow and about 50% of the time I try to connect to the internet I get an error "internet explorer cannot display the webpage." AVG is not catching anything. I ran hijack this and got this error "for some reason your system denied write access to the hosts file." I also downloaded and ran GMER. It said 'GMER hasn't found any system modification." The log was blank.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:12:49 AM, on 10/10/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\CNYHKey.exe
C:\Program Files (x86)\IOI\Smart Copy\ButtonMonitor.exe
C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Windows\ModLedKey.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Mary\Desktop\HijackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\M... Read more

Answer:System extremely slow, cannot connect to internet

15 more replies
Relevance 63.55%

Hi. I am brand new here and could really use some help. My computer in general has been running slow for a while, and Internet Explorer is ridiculous--dial up would faster (and have a cable connection. I read some of the other posts, and dowloaded/ran HijackThis. Norton, AdAware, Windows Defender and SpyBot all say my systems clear. Any suggestions? Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 3:13:14 PM, on 7/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\s... Read more

Answer:System and Internet Explorer running slow

8 more replies
Relevance 63.55%

Hey,

I recently had a virus and did a system restore, since the system restore my internet has been running very slow and i have no idea why.

Does anyone know how to fix this?

My HijackThis log is below


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:16:54, on 26/06/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Jump Desktop\JumpDesktop.exe
C:\Program Files (x86)\SpotifyRemotelessHelper\SpotifyRemotelessHelper.exe
C:\Users\USERNAME\AppData\Roaming\Spotify\spotify.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Users\USERNAME\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Users\USERNAME\AppData\Roaming\Xoag\waeqt.exe
C:\Users\USERNAME\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Brunel University\Connect\Assistant\BrunelConnectAssistant.exe
C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x8... Read more

More replies
Relevance 63.55%

I have been having problems accessing some web-sites and any program that downloads other than windows cannot detect a network. I installed service pack 2 for xp and programs like Download accelorator plus, pokerroom patcher, ubi.com patcher, trymedia downloader and gamedaily downloader do not work. Thinking it was the firewall on service pack 2 I unistalled the service pack and it still happens. I have been getting a transcoding failure xerces panic error and VCMain.exe common language runtime debugging service : application generated an exception that could not be handled ok to terminate program or cancel to debug Process id= 0x220(544) Thread id= 0x224(540) at start up. Debugging always fails.
 

Answer:Solved: Internet hangups and slow system

10 more replies
Relevance 63.55%

hi guys
i recentley got myself caught and had the sytem restore virus hijack my pc i followed a few steps off this site to remove it with malwarebytes and a Tdds killer which seemed to have worked but now my internet is going at a snails pace which leads me to believe that i havn't completely got rid of it... any ideas would be much appreciated
 

Answer:slow internet after system restore virus

Now it seems i cant even connect i'm on a wireless network with another person in the house using it. The internet seems to be struggling for everyone
 

1 more replies
Relevance 63.55%

Dear Friends,

I have Windows 7 (RC). The System is running fine. But my problem is that whenever I connect to the Internet, the entire System becomes very slow. It becomes hard to operate, the System responds to every action very slowly.

When I checked the Performance in Task Manager, the memory usage without the Internet is between 480 to 520 MB. Is this normal? But when I connect to the Internet, it increases above 680 MB. And the maximum memory usage is by IE; above 135 MB.

Kindly help.

Thank you.

Answer:Internet Explorer makes the System slow

  
Quote: Originally Posted by GladwinRam


Dear Friends,

I have Windows 7 (RC). The System is running fine. But my problem is that whenever I connect to the Internet, the entire System becomes very slow. It becomes hard to operate, the System responds to every action very slowly.

When I checked the Performance in Task Manager, the memory usage without the Internet is between 480 to 520 MB. Is this normal? But when I connect to the Internet, it increases above 680 MB. And the maximum memory usage is by IE; above 135 MB.

Kindly help.

Thank you.


Hi Gladwin,

Thanks for the post. I just opened IE on my system (I am using 7264) and the memory usage increase was close to 100MB so it may be ok where that is concerned. The basic specs for Win7 (as per Microsoft) are 1 GB Ram so you are fine on the RAM. Since your RAM is a little low....I would imagine that it would be using that much (unless someone here has a better knowledge of memory usage at that level). Could you tell us your flavor of Windows 7 (x86 or x64)....was it a clean install or upgrade and when you open IE, is it maximized?

3 more replies
Relevance 63.55%

I am posting this for my roommate because he doesn't have an internet connection due to a potential virus so I am using a USB drive to get the information back and forth from his system to this thread. here is the DDS and Attach. Thank you very much for all your help in advance.


DDS (Ver_09-07-30.01) - NTFSx86
Run by todd hardy at 15:19:01.25 on Sun 09/20/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.1013.214 [GMT -4:00]

SP: Spybot - Search and Destroy *enabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k Akamai
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Microsoft Small Business\Business Contact Ma... Read more

Answer:No internet and system running terribly slow

It appears to me that the interference is from a struggle between Spybot Search and Destroy's Tea Timer and Windows Defender...and it appears that the administrative locking feature of Spybot may have been employed.

There is also the point I need to make regarding an out dated Adobe installation. The Older Adobe Reader has an exploit that is reported to have been responsible for many users suffering a dns hijack which could also be resolved by updating the application, and resetting the router. If the router is reset, a new and Strong Password should be created to help prevent this in the future.

At any rate, we need to disable the Tea Timer function and Windows Defender for now:

To disable Windows Defender: Open Microsoft Windows Defender. Click Start, Programs, Windows Defender
Click on Tools, General Settings
Under Real-time protection options, unselect the Turn on real-time protection check box
Click Save
...and to disable Tea Timer:Run Spybot-S&D
Go to the Mode menu, and make sure "Advanced Mode" is selected
On the left hand side, choose Tools -> Resident
Uncheck "Resident TeaTimer" and OK any prompts
Restart your computer.

After all of the fixes are complete it is very important that you enable Real-time Protection again for one of those but not both. If it were my system, I think I would go with Windows Defender.

Next, your roommate needs to decide which of these to keep:
Norton Internet Security
AVG 8.5
...and uninstall ... Read more

6 more replies
Relevance 63.55%

Lately, whenever I start up my pc it takes a while to start running smoothly. 3-5 mins after its turned on, it still takes a while to open up a process. It also takes a while to turn off and restart. I reformated and theres around 90% memory still left in this computer, I dont understand on why its running so slow. I ran all your scans and came up with few viruses except on Spy bot I got around 30. I thank you in advance on helping me solve this problem here below is my log.



Logfile of HijackThis v1.99.1
Scan saved at 10:12:09 PM, on 9/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HJT\HijackThis.exe

O2 - BH... Read more

Answer:System Slow, Takes a while to open internet etc.

Bump.

3 more replies
Relevance 63.55%

Hi, today when I went to a website I got the java plugin start up and mcafee blocked a few programs from downloadiing. My system appears to be slow and startup is slow too. Worried that my computer got infected. here is the log.

Thanks.

How can I stop java plugin or active x from running?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:01:06 PM, on 4/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\SanDisk\Sansa Updater\SansaDispatch.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\mrofinu572.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\drivers\trcboot.exe
C:\Program Files\IBM\Personal Communications\PCS_AGNT.EXE
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mc... Read more

Answer:System slow. Startup slow. McAfee warnings.

8 more replies
Relevance 63.55%

My system just seems sluggish. Microsoft apps take a long time to open. I've run adaware, spybot, attached are activescan and hijackthis logs. DSS would not run. It dies while CLEANING TEMPORARY FILES.

hijackthis.log
--------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 12:24:48 PM, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Softex\O... Read more

Answer:System slow, word/excel slow to open

Bumping

11 more replies
Relevance 63.55%

My PC has recently started to load up very slowly, with the icons on the bottom left of the taskbar (including Nortons) taking over 2 minutes now to load. Secondly my bt broadband service started running slow as well. I've checked this on a laptop and it's working fine so definetly the PC. Finally I tried to do a system restore but it keeps coming back saying incomplete restore. I've checked for viruses and spyware, and run defrag but to no avail. Anyone got any ideas?? I'm running XP with 512MB.Thanksdarren

Answer:Slow startup, slow broadband and no system restore

bump

4 more replies
Relevance 63.55%

Specs: Win7 64bit, 4GB ram.

For the past little while now, whenever I would turn on my computer, things would start up but it would hang, in the sense that nothing *would* start up until the network was found and connected to. The network indicator icon in the taskbar would just have a frozen blue spinning circle. While that was happening, I would still have internet access, but certain things like watching youtube would cause the browser to crash. I would be like that for about 10 minutes until suddenly it would tell me "network found" and the rest of my pc starts up as usual.

When in safe mode with networking, this problem does not occur. I used msconfig and disabled everything that starts up to see if that was the issue but the problem still occurred.

After some google searching, I found some results that tied to having an HP printer, some Nvidia network connection... But alas, I had none of those things. On start up, I checked my resource monitor to try to catch anything weird, all I saw were alot of svchosts and pagefile/windows stuff.

Here's a screenshot of the resource monitor and the network icon thingy.

I could use the help for this one, I'm just about ready to format at this point..

Answer:Network slow to initialize on startup, slow system

  
Quote: Originally Posted by TurboGFF


Specs: Win7 64bit, 4GB ram.

For the past little while now, whenever I would turn on my computer, things would start up but it would hang, in the sense that nothing *would* start up until the network was found and connected to. The network indicator icon in the taskbar would just have a frozen blue spinning circle. While that was happening, I would still have internet access, but certain things like watching youtube would cause the browser to crash. I would be like that for about 10 minutes until suddenly it would tell me "network found" and the rest of my pc starts up as usual.

When in safe mode with networking, this problem does not occur. I used msconfig and disabled everything that starts up to see if that was the issue but the problem still occurred.

After some google searching, I found some results that tied to having an HP printer, some Nvidia network connection... But alas, I had none of those things. On start up, I checked my resource monitor to try to catch anything weird, all I saw were alot of svchosts and pagefile/windows stuff.

Here's a screenshot of the resource monitor and the network icon thingy.

I could use the help for this one, I'm just about ready to format at this point..



This is obviously a network thing. Has something changed? did it ever work? are you using "homegroup" or workgroup?

Formatting wont help a network problem.

Ken

9 more replies
Relevance 63.55%

My PC has recently started to load up very slowly, with the icons on the bottom left of the taskbar (including Nortons) taking over 2 minutes now to load. Secondly my bt broadband service started running slow as well. I've checked this on a laptop and it's working fine so definetly the PC. Finally I tried to do a system restore but it keeps coming back saying incomplete restore. I've checked for viruses and spyware, and run defrag but to no avail. Anyone got any ideas??Thanksdarren

Answer:Slow startup, slow broadband and no system restore

Ignore this one. Soz.

1 more replies
Relevance 63.55%

here are all the logs i have made
 

Answer:Malware logs, firefox freeze, comp slow, internet explorer slow

Welcome to Major Geeks!

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide
and attach the requested logs when you finish these instructions.
**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
If you cannot seem to login to an infected user account, try using a differe... Read more

7 more replies
Relevance 63.55%

Hello,I have a few problems that i would kindly need some help to fixFirstly, i have been and idiot and tried cracking stuff, yes i am sorry and i shall now buy worthy products.As a result i believe i have had my internet speed hijacked(is this possible?) and i need urgent help on removing these viruses.I also recieve an annoying icon at the bottom of right hand corner which reads (Virus Alert!) and then is followed by a small pop up box which reads:Your computer is infected!Possible harmful infection was detected on your PCThe system will now download and install the most efficentspyware removal program to prevent private data loss andyour identity theft.Click here to protect your PC from the biggest spyware threats.Here is my HijackThis log.Any Help Would Be Greatly Appreciated.Logfile of HijackThis v1.99.1Scan saved at 6:37:31 PM, on 3/17/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\A... Read more

Answer:Internet Speed Very Slow For 256k, Very Slow Start Up, Very Laggy When Multi Tasking

Did you follow the instructions here:http://www.bleepingcomputer.com/forums/t/43659/how-to-remove-spyfalcon-removal-instructions/If not please do so and then post a new hjt log as a reply to this topic.

16 more replies
Relevance 63.55%

Logs attached.

Thanks in advance.
 

Answer:Hoax sofware installed, computer generally slow, internet connection slow

Last ones...
 

4 more replies
Relevance 63.55%

Well, not sure what I did this time....i had issues a while back, you guys helped me fix them. Thanks again for that. I am not sure what i ran into this time. I will post my HJT, please let me know what else you need. I will also bookmark this thread. Thanks in advance guys/gals.

Logfile of HijackThis v1.99.1
Scan saved at 5:41:49 PM, on 8/30/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Linksys\Wireless-B USB Network Adapter\NICServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechD... Read more

Answer:Not Again! Slow PC, Slow Start Up, Slow Outside of Internet

Hello justanotherguy,

You continue to get reinfected because you are still running unpatched XP.

IMPORTANT!:
Before we can proceed any further, please visit the Microsoft's Windows Update Page and install ALL Critical Updates for your system (except service pack 2 (SP2). SP2 should only be installed on a fully disinfected system.) At the minimum install at least SP1a for both XP and IE6. Without these updates your system is wide open to re-infection and we are both wasting our efforts to clean your system. After we have completed your clean-up, we will have you return to the Windows Update page and install SP2. We will also then advise you on how to better protect yourself online.

Please apply those updates BEFORE posting your next log. It is this forum's policy to stop the disinfection process until these basic updates are done. If during the updating process you get a message that your product key is invalid ....then you may not have a legitimate copy of Windows XP. Unfortunately it?s also this forums policy that we only address users with a legal copy of Windows XP.... therefore if you can not update Windows XP to SP1 we must stop the cleansing process here.

**Note** If you're having trouble locating the service pack SP1a here is a direct link to download it from.

------------------------------

Perform an online scan using Internet Explorer with Panda ActiveScan
** click on "Free use ActiveScan" located on the top right hand corne... Read more

1 more replies
Relevance 63.55%

Hello Techspot!!!!

I have had my laptop for nearly 3 years but I wouldn't deem it to be a poor performance laptop. Recently I have been getting slow internet, poor keyboard response and slow scrolling, and it is very frustrating!!! I share the BT 3 homehub with good connection speed which was checked and found fine! My housemates laptop has started having the same problem as mine and I really want to fix this issue. The internet, keyboard and scrolling speeds vary everyday but overall are slow performers. I have looked through some of the threads and have seen people posting long threads of code etc :/ Is there anyone out there who has the time and patience to help me fix this problem? It would be most appreciated!!!

Many Thanks

Dan
 

Answer:Slow internet, poor keyboard response and slow scrolling problems

First, get us

make/model of all PCs
of the internet modem
and any extra router attached.
Is this a rather new ISP for you and/or are the PCs newish or older ones?

Did you every have good response? HOW long ago?
 

1 more replies
Relevance 63.55%

Hi all
sorry for the long title but i read to be as detailed as possible

Rite .. im not a wizz with this kinda stuff

i have a Hp laptop that was workin fine when i first got it ... its been a while and its started to get very slow .. also i have a error msg telling me

MsnMsgr.Exe corrupt file
the file or directory C:\$Mft is corrupt and unreadable please run the chkdsk utility.

when i try and sign into msn .. it wont let me anymore

i have NO idea what this means

i did run it but nothing happened

my laptop also freezes

i was wondering if i should use my recovery disk to reinstall windows Xp and if so will i have to reinstall the internet as i dont have the disk anymore

Thank you for taking the time out to read

Answer:Slow Start, Slow When Opening Boxes, Can I Reinstall Xp Without Having To Reintall My Internet

Before taking the major step of reinstalling your OS, try two things first:1. Delete and then re-install MSN Messenger (that will fix your corrupt file)2. Review the Slow Computer Troubleshooting Checklist that can be found here:http://www.bleepingcomputer.com/forums/t/44690/slow-computer/Regards,John

8 more replies
Relevance 63.55%

Hi, My internet is very slow. I have a asus k8v-se deluxe motherboard, and im starting to think that its the onboard ethernet port thats slow. Im directlly conected to a linksys wireless n router( the fastest one out) and all the other computers in my house go pritty fast. I just reformated my hard drive and wiped my computer completely so i shouldnt have the same problem...... but do. So if someone anyone has any suggestions as to what i should do, shoot! or if you can finda link to a fast ethernet internal card that would be great. I want to use all of my router, its 12x the speed of G. so i wanna put that to the test......... please help me. thanks -Nick
 

Answer:internet slow, great connection in house on other comps, just reformated, always slow

When you say directly connected to your wireless router do you mean physically?
 

5 more replies
Relevance 63.55%

Lately my internet and computer have been extremely slow, i have broadband internet and its always been very fast until this past week.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:47:46 PM, on 4/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv2.exe
C:\WINDOWS\system32\brvrav32.exe
C:\Program Files\Linksys Wireless-G USB ... Read more

More replies
Relevance 63.55%

Hello, I have a Dell 5558 Inspiron.  the internet is very slow to load.  My wife has a macbook pro that runs circles around my PC for web browsing.  I have tried various tricks to minimize startup functions and background apps.  is this a hardware issue that can be upgraded?  would upgrading the GPU, upgrading to SSD, or adding more RAM help?

Answer:slow internet loading, slow youtube response: Dell 5558

also, this unit has an intel AC-3160 wifi card.  can this be upgraded or adjusted to work better?

1 more replies
Relevance 63.55%

 Hi The computer  that is slow is a desk top tower. In a home.  it is a E machine.
 it has windows 7  professional  with service pack 1
DO KNOW :  I am very new to windows 7 and all it's features. 
When I brought this computer home  last Nov. it was lightening fast at everything! so much better than  the windows XP  it replaced, I was thrilled.  yet Now starting in  April 2015  it is as slow  or slower  as my old Windows with XP ever was  ( and partially the reason for saving my  pennies to get this windows 7 computer)...and  now I'm upset. feeling  like I have been taken.
 
Computer displays the following :
3.8 windows experience index
Intel pentium dual 2.0Ghz  processor 
64 Bit
 
Has Ccleaner installed
has Comodo antivirus and Comodo cleaning essentials installed.
All virus scans  find no infections,  and report that all is well and protected.  ( B/C of the way the computer is operating i'm doubting that and betting there is an infections of some sort)
 
I Have run Comodo cleaning essentials and  results find no abnormalities or infections.
Have run TFC and JRT  and the computer shows no signs of improvement.
have run rKill  and it  finds  no abnormalities  or infections.
All virus scan results  find no infections.
Windows updates is activated  and  all latest updates have been installed.... Read more

Answer:Windows 7 computer suddenly slow to get on internet, slow to browse websites etc

Hi flywelder Maybe we aren't looking at an infection here. There's tons of reasons why a system can slow down, and not all of them are malware related. Let's try to take a look at this issue under another angle shall we?MiniToolBoxDownload MiniToolBox and move the executable file to your Desktop;Execute MiniToolBox and check the following options:List Installed Programs;List Last 10 Event Viewer Errors;List Devices - Only Problems;List Users, Partitions and Memory size;Once this is done, click on Go and wait for the scan to complete;Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

83 more replies
Relevance 63.14%

Trend Micro OfficeScan detected two objects, BKDR_TDSS.V and BKDR_TDSS.T, which it says it is unable to delete. They are supposedly located at C:\WINDOWS\system32\TDSSaewii.dll and C:\WINDOWS\system32\TDSSurta.dll, respectively, but I can't find any such files in the system32 folder.

Any tips on how to locate and remove these things? I'm pretty much clueless when it comes to computers, so if there's a specific process I have to do, I'd appreciate a step-by-step explanation if it's not too much trouble.
 

More replies
Relevance 63.14%

I know it's malware, and from reading the forums I didn't run Comboware (i think that was the name) because the previous issue involved Symantec AV protection. I use AVG, Ad-Aware and Malwarebytes on this machine so didn't use previous advice. BTW, love you guys and use bleepingcomputer all the time to check startup programs. Thank you!
.
DDS (Ver_2011-06-03.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Owner at 20:11:29 on 2011-06-07
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4061.2728 [GMT -5:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG10\avgchsva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windo... Read more

Answer:Win7 very slow, internet slow, and even Chrome is giving us fits.

Hello benahad and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please print or save this topic: it will make it easier for you to follow the instructions and complete all of the necessary steps. ***Note: In order for ComboFix to run properly AVG must be uninstalled. Please go here and follow the instructions to uninstall AVG.You can reinstall it after the computer is clean. --------------------------Please temporarily disable Ad-Aware's Ad-Watch, as it may hinder the removal of some entries. You can re-enable it after you're clean.Right click on the Adaware icon in the system tray and select Exit.(You may need to do this each time you reboot.)--------------------------Please download ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Please go here to see a list of programs that should be disabled.**Note: Do not mouseclick ComboFix's window while it's running. That may cause it to... Read more

3 more replies
Relevance 63.14%

Windows Vista sluggish operation
Here are logs. Thanks
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:28:45 PM, on 22/01/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\SGPSA\ie3sh.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Freecorder\FLVSrvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Window... Read more

Answer:Slow computer slow internet response packet loss

16 more replies
Relevance 63.14%

Is there anything on this log that might slow down my machine, particularly in Internet broadcasting

Logfile of HijackThis v1.99.1
Scan saved at 10:09:40 PM, on 9/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Even though I use Mozilla
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\ASF Agent\ASFAgent.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Roxio\Easy Media Creat... Read more

Answer:Slow, brand new machine, slow upload on internet broadcast

Hi, One thing sticks out, but there are a lot of other things starting up, you do need to trim startups some...

You have two antivirus programs, Norton and AVG, are both active in the background, starting when the computer does? That alone will cause you problems....use one or the other, save the second, but set it to not run at all when the computer starts...you can do this inside the program itself in almost all cases...look in Options or Settings for the things that are checked to let the program start up and monitor in the background (active protection) and set the one disabled.

I know some folks that work a lot with startup items...you will probably be hearing from some with help for that.

I tried running Copernic a few years ago on what today is an outdated machine and it really bogged things down...used to use a lot of resources that could be better used elsewhere.
 

1 more replies
Relevance 63.14%

So yeah, I've these problems for the past couple days. My browsers (Opera and Firefox) used to load pages quickly, but now they're painfully slow. Opera lags and freezes often; Firefox doesn't, but it still takes a very long time to load pages.

I'm also getting these occasional "invisible ads," even when I don't have a browser open. I can hear the ads but I can't see them.

Also, I sometimes get redirected to unwanted sites. This mostly happens when I click on a search result in Google.

Here are some things I've done:

-Ran SUPERantispyware (I can post the log(s) if needed)
-Defragged hard drive
-Cleaned cache, cookies, etc. on both browsers

Answer:Slow browser, slow internet, random audio ads: virus?

Hello Tienjt,

Scan your computer again, this time using Microsoft Security Essentials and Malwarebytes Anti Malware as posted in the links below:-

Download CCleaner to get rid of temp files - it will make the antivirus scans go faster :-)
Download CCleaner 3.20.1750 - FileHippo.com

Download Microsoft Security Essentials (MSE) from here:
Microsoft Security Essentials - Free Antivirus for Windows

Download the updates for MSE from here:
Install the latest Microsoft Security Essentials definition updates - Get the latest definitions - Microsoft Malware Protection Center

Download malwarebytes from here:
Download Malwarebytes Anti-Malware 1.62 - FileHippo.com

And the malwarebytes updates from here:
http://data.mbamupdates.com/tools/mbam-rules.exe

Provide feedback when you can. Thank you.

9 more replies
Relevance 63.14%

hi all,

it's been a long time since I have had to post something about my problems in these forums. Well over a year as I have had my laptop for over a year now. This may seem like a similar thread to most that have been put up recently but I think it is quite different.

Ever since I have upgraded to IE8 I have noticed Vista be very slow. It could be to do with IE8 but I think that the slowness of my machine has been since before then...according to my wife. Has her facebook shennanegans broken the laptop???!

Here is a list of problems I am getting:
Long start up times. They aren't bothering me that much, just seem to be a bit longer than normal.
Very long time from when Vista has loaded and I can actually do somehting (15 minutes just now to access an mp3 on my desktop and it kept skipping for about 5 minutes before it stops skipping and playing the track normally)
Extremely slow at logging onto the internet. I mean that it takes minutes, literally minutes for IE8 to even display the very first internet page. After that it is slow, but not as bad...still frustrating though.
Changing between programs seems to take a few seconds.
Accessing my computer or my documents is like a game of russian roulette, will it let me or won't it.....£900 on it won't!!!!
On mp3 tracks, if you go back to a certain point in the track it will take a few seconds to actually complete the task

I have about 26gig free on my hard drive. But about 80 gig is used up for phot... Read more

Answer:Laptop - Vista - Very slow on internet & even media player is slow

hi my first instinct is to get your self an external hdd and transfer your files folders etc to it then visit the folks in security and hijack if nothing else lets rule out any possibity of infection. when you upgraded to ie8 was it still in beta, what av and firewall are you using. have you run your av, can windows update same for windows defender, i know its a lot of questions but the answers could be helpfull
 

2 more replies
Relevance 63.14%

Im looking for some assistance on these two matters.

Firstly my Computer is taking along time to load up at start, I have only uploaded 1 new program in the last month or so and that is PPmate ( a Live steaming program).

I have also noticed that on loading up my internet explorer is very slow to load up my home page.

Please find Hijack this log below:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:36 AM, on 31/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dlcgcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell AIO 810\dlcgmon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WIND... Read more

Answer:Slow Computer on start up & Internet explorer runng very slow.

16 more replies
Relevance 63.14%

Hello all,
My computer has recently become infected. I've scanned with Malwarebyte's Antimalware, Norton Internet Security, and SuperAntiSpyware. Norton didn't show any results, but Antimalware and Superantispyware both removed a decent amount of items, however I do not think my computer is entirely clean. Whenever I open Firefox, if it even opens, all of my google searches get redirected to different sites. The only site I remember being directed to was zanuga.com, but there were others. This also happens on IE8. I've tried opening Firefox in safemode, and I get the same redirects. I've posted my HiJack This log below.

Oh, and also, I've noticed the creation of HelpAssistant and HelpAssistant.desktop folders in my Documents and Settings directory.

Happy Holidays,
TRBMan

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:36:43 AM, on 12/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe... Read more

Answer:Google redirect, slow internet browsers, slow computing

update:
spybot took care of my browser redirects, but my computer is still going very slow and often crashes whenever it is working under a more than moderate load.
 

3 more replies
Relevance 63.14%

Hi,
Im new to the forum so ill keep it short:
1.My laptop takes 10 mins to start up.
2.The internet page goes pale and says not responding when i start the internet up.
3.My laptop takes agestoshut down.
4 When i write text on internt pages there is a delay in the text coming on the screen
Any ideas on how i can solve thse problems?

Answer:Slow Laptop..slow starting up and loding internet pages

1. Software
a) Clear out all temporary files and folders -- use CCleaner http://www.piriform.com/ccleaner/download
b) Scan for malware spyware and viruses --Free Anti Spyware :-
Malwarebytes http://www.malwarebytes.org/
Superantispyware http://www.superantispyware.com/download.html
Free Antivirus software
MicroSoft Security Essentials http://www.microsoft.com/security/products/mse.aspx
Avast http://www.avast.com/en-gb/free-antivirus-download
c) Clean the registry -- Use the tool in Crap Cleaner its very safe and also allows you to back up the registry first.
d) Pagefile (Virtual Memory) -- Right click MY Computer - select properties - Advanced tab - Performance -
advanced tab - Virtual memory click change, you can put the page file on a different drive (if you have one), click
custom size and set Initial size to one and a half times the amount of memory you have fitted i.e. 512MB memory
= set to 768MB, set maximum to double your memory amount i.e. 512MB memory = 1024MB click ok.
If your hard drive is full and there is not enough room for the pagefile this can slow down, freeze or even cause the
PC to crash (restart).
e) Cut down on the programs that load at start up -- Start - Run type msconfig - start up tab- untick everything except for firewall, antivirus and antispyware
and the services that run in the background. http://www.blackviper.com/
2. Hardware
a) Hard drives /
i) IDE Channels: (Not required if you have SATA drives)
Check the transfer rate, you need to have ... Read more

1 more replies
Relevance 63.14%

Could someone please look at my hijack this log? My computer is running painfully slow, especially the internet. I see two suspicious programs in my task manager: exec.exe & x1exec.exe. I really appreciate it! Thanks!

Logfile of HijackThis v1.98.2
Scan saved at 12:27:23 AM, on 8/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\LTSMMSG.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\WINDOWS\System... Read more

Answer:Slow computer, slow & crashing internet. EXEC.EXE problems?

7 more replies
Relevance 62.73%

I have a Sony Vaio desktop computer that I purchased in late 2003 or early 2004. Last year I purchased a new laptop computer and since have only used my sony vaio to play and manage music. Basically I neglected its updates, virus, and spyware protection and have not been able to use the internet on it for months because it just doesn't work...period. So I decided, since I do not use the computer for anything but music, I would completely restore the entire computer to factory settings. After backing up my music, I did so hoping for a functioning computer again. However, even though everything else seems to be functioning properly, the internet still barely works. It can get to google and search for my desired topic, however it is still EXTREMELY SLOW and usually I can't get to most websites. Any ideas how to get my computer functioning again???? Thanks for the help, it is much appreciated.

Kevin

Answer:Slow Computer/Internet AFTER complete system restore

Log on as an administrator, go Start > Run and type: "cmd". In the window that appears type: "netsh winsock reset". When the program is finished, you will receive the message: "Successfully reset the Winsock Catalog. You must restart the machine in order to complete the reset." Close the command box and reboot your computer.Go Start > Run > type: "cmd" In the window that appears type: "ipconfig /flushdns". Close the command box.Go Start > Control Panel > Network Connections. Right click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and and choose Properties. Double-click on the Internet Protocol (TCP/IP) item. Select the radio button that says "Obtain DNS servers automatically". Reboot.Warning: Some Internet Service Providers need specific DNS settings. You need to make sure that you know if such DNS settings are required before you make this change.

11 more replies
Relevance 62.73%

This is my first post and I have read others and read the rules so I hope I can be clear enough that someone might be able to help me. I can manage on my computer and am a wiz at the software apps I know but I lack greatly in the technical department. But I do know that over the last several weeks my system has come almost to a halt. Yesterday I fell asleep waiting for a page to load... So it is time to get some real help.

I have a Dell Latitude E6500 Intel Duo Core 2 2.8 GHz with 3.48 GB of Ram. Have about 80% of my hard drive free, running WinXP Pro SP3. I was keeping it updated but now my updates are failing.
I purchased McAfee Total Protection with Site Advisor with the system but now my computer tells me I don't have an antivirus software. So today I installed Symantec Edpoint Protection. I had super anti-spyware (free version) and reg cure, and ran ccleaner regular but things just seemed to keep getting worse. So I bought adware professional v5.0 because I scanned my system online and it said I had a "severe" danger present. Well I scan my computer with this Adware software and it finds a bunch of cookies and then this thing called Amber.Velletta danger. It couldn't get rid of it but I guess Symantec did when it found the other different threats to my computer. There is Adware.NDotNet, Adware.OneStep, about a dozen Trojan Horses detected, and most were quarantined but not all. But the problem is that my system is still sooooo slow.
I defragged my ... Read more

Answer:System & Internet slow...trojans, adware, spyware...HELP

bump
 

2 more replies
Relevance 62.73%

I have 1000mbps internet connection. When I booted my Laptop (T430) from a USB with Linux Mint and checked the internet speed, it was 800+ Mbps. With Windows 10 Pro it is only ~150Mbps.Windows version: 1703I had to restore my windows to this version because after the last bigger update (1709) the whole laptop was so slow that it was impossible to work with. The internet speed was only ~50-70Mbps.Well, now the system fast enough that at least I can work on it. But still, 800+ vs 150 is a huge gap.Any idea what should I do?It is so annoying and disappointing that such an expensive laptop (even if it is 5 years old) with 16 GB RAM and with a Samsung SSD 850 Pro is totally useless. It is ridiculous.Every driver is up to date. I am connecting to the internet via cable, wifi is turned off. 

More replies
Relevance 62.73%

Hi all
 
 
i donno its my first topic if it not in proper location to post please transfer it to that section  thanks
 
 
am having issue of running slow internet especially facebook and the memory ussage is higher where not a single applicaton runs on my laptop but still slow response of internet and system start up 
 
and other issue is where ever i click an add on facbook if i open or visit a website the same add windows open right left up and down in that browser it may b chorome or opera or firefox what ever browser all adds appear in it 
 
 
so sory for my bad english 
 
hoping some one help me out with this issue 
 
thanks ..

Answer:Urgent help needed Internet and system running slow

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis

2 more replies