Over 1 million tech questions and answers.

slow computer, hijacked desktop, slow internet

Q: slow computer, hijacked desktop, slow internet

Hello, my computer has been extremely slow on boot and my desktop has been hijacked with a message about changing it to a website. I also have a program called "error fix" showing up on my desktop and I have no idea where it came from. I've run Malware Bytes twice on the computer with numerous problems found. After running it the second time, I got a message saying I needed to run CHKDSK which I ran. Also, my internet is running very slowly and I just got a message that says "A program on your computer has corrupted your default setting for Internet Explorer. Internet Explorer has reset this sietting to your original search provider, Live.Search (search.live.com). Internet will now open Search Settings, where you can change this setting or install more search providors."

Here is my Hijackthis Log, if you need the MBAM logs, please let me know and I will post those as well.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:20:23 AM, on 6/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative Home\Hallmark Card Studio 2006\Planner\PLNRnote.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Memturbo 4\MemTurbo.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN\Toolbar\3.0.0988.2\msntask.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop" target="_blank" class="wLink">http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: (no name) - {0554C86D-537D-448E-A0D2-1598989AD841} - C:\WINDOWS\system32\audiosr.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4E79B6AD-7567-4C1E-ABE9-C89AEDD77F42} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: CleanupHelper Class - {6DFD889B-7F81-44C4-BC1F-06A857C01C41} - C:\Program Files\ArmorIE\SX.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: (no name) - {FFDD804F-A7F8-4395-93D2-66A85DA2BDAB} - (no file)
O3 - Toolbar: WeatherStudio348 - {15757333-2BCA-4B77-A807-D0955132F812} - (no file)
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.0988.2\msneshellx.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~2\bar\1.bin\m3SrchMn.exe" /m=2 /w
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - S-1-5-18 Startup: MemTurbo.lnk = C:\Program Files\Memturbo 4\MemTurbo.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: MemTurbo.lnk = C:\Program Files\Memturbo 4\MemTurbo.exe (User 'Default user')
O4 - Startup: MemTurbo.lnk = C:\Program Files\Memturbo 4\MemTurbo.exe
O4 - Global Startup: Event Planner Reminder.lnk = C:\Program Files\Creative Home\Hallmark Card Studio 2006\Planner\PLNRnote.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: ArmorIE - {0565CF3E-6070-4272-8EEF-51E5083BE3D9} - C:\Program Files\ArmorIE\SX.dll (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1151777979375
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: awtqr - C:\WINDOWS\
O20 - Winlogon Notify: awvtq - C:\WINDOWS\
O20 - Winlogon Notify: vtutu - C:\WINDOWS\
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 12431 bytes

RELEVANCY SCORE 200
Preferred Solution: slow computer, hijacked desktop, slow internet

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: slow computer, hijacked desktop, slow internet

bump

Read other 1 answers
RELEVANCY SCORE 83.2

Hi,My son downloaded a file last week and installed it on our pc. This is when all of the problems started.The desktop background disappeared, instead there was this: Security Warning: .....,also keep getting an error every time windows loads: Run-time error '339':Component 'MSWINSCK.OCX' or one of its dependencies not correctly registered: a file is missing or invalid.We keep getting popups telling us to go to the websites. Windows is loading very slow and I can't use IE, it's not loadingwebsites.We also keep getting blue screens with no error messages on them.This is what I have installed for protection: Symantec Antivirus Version 9, Windows Defender and Router firewall.Here is the list of things I did so far:Scan with Antivirus (found 1 virus), scanned with windows defender (found nothing),scanned with SuperAntiSpyware with latest definitions in safe mode, scanned with AVG Anti Spyware in safe mode.both of the tools found a lot of problems 700+, fixed all of them.I need some help,thank youHere is the LOG from HIJACK THISLogfile of Trend Micro HijackThis v2.0.2Scan saved at 9:23:56 PM, on 3/25/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32... Read more

A:Desktop Hijacked, Computer Very Slow, Need Help

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please download ComboFix and save it to your desktop.Prior to running Combofix.exe you should disable your antivirus program and disconnect from the internet.Double click combofix.exe and follow the prompts.When it's done running it will produce a log for you. Please post that log in your next reply.Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Read other 21 answers
RELEVANCY SCORE 79.6

my task manager wont allow me to select any items to end the process...
my computer is going very slow and i keep getting a dumb pop-up in the corner from some bootleg antispy program that i never downloaded



Logfile of HijackThis v1.99.1
Scan saved at 5:40:32 PM, on 6/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5346.0005)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\$sys$filesystem\$sys$DRMServer.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\WINDOWS\CDProxyServ.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\PROGRA~1\KEMailKb\KEMailKb.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\... Read more

A:internet hijacked, SLOW computer

Please be specific on what you mean that you can't select a process to end. Is it because there is no button and menu? If so, just double click on the border of the task manager and it should bring everything back.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you might get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on start update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net/en/download/updates/ to update manually.

Download Cl... Read more

Read other 6 answers
RELEVANCY SCORE 78.8

Hello,
I am running Windows XP on an e-machine. I am getting a huge amount of pop-ups, some are very vulgar in nature. I can only search from Windows Live Search. I cannot search from yahoo, google, etc. When I try to search from all others except Windows live search, nothing happens. The little green progress bar just doesn't go anywhere. Sometimes my start up page is being redirected. My internet searching is very limited. When searching from Windows live search, most of the time it won't let me download a program. It hangs up also. Any help is greatly appreciated. I have included a hijackThis log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:37:53 AM, on 7/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.... Read more

Read other answers
RELEVANCY SCORE 77.6

(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files... Read more

A:computer slow to boot, slow response, very slow internet, fans on high - HJT log

Any thoughts, anybody?

catillac said:


(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft... Read more

Read other 1 answers
RELEVANCY SCORE 77.6

My computer is unusually slow and it takes up to 10-15 minutes just for my computer to completely start up.

Here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:34:18 AM, on 12/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files... Read more

Read other answers
RELEVANCY SCORE 76.8

For some odd reason, in the past 4 weeks, my streaming video has become VERY slow, and I do not know why. I have a high-speed cable connection, the same I have had for the past 6 months. It is slow, sound-with-stil-images and/or constantly rebuffering, and this is true with WIndows Media, Winamp, Realplayer and even Flash videos (on YouTube for example). I cannot take it anymore. I tried this Hijackthis thing, and this is my log:

Logfile of HijackThis v1.99.1
Scan saved at 3:58:08 PM, on 7/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Sophos\Remote Update\cachemgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\sophos\remote update\imonitor.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sophos SWEEP for NT\S... Read more

A:Slow internet, slow video streaming, slow computer... aaaaah!

Please, somebody.
 

Read other 2 answers
RELEVANCY SCORE 75.2

Running older PC Clone 2.0 Ghz Dual CPU Pentium, 1GB Ram Win XP Home Edition system.

While navigation on Internet Explorer or Google Chrome, system runs extrememly slow and/or crashes. When using applications such as Itunes, Email, or simply opening up Word and other applications, it runs very slow and almost seems to stop. The IE7 that was on the computer had changed to an operate with add-ons off as a result of the infection. I downloaded and reinstalled IE7 and this seems to have fixed that problem for the time being. MalwareBytes and SuperAntiSpy icons dissappeared from my desktop. When trying to use them from the Start / Menu options the programs no longer worked. I reinstalled them and they appear to work fine now. However, the system still seems to run very slow over all and its performance is greatly hindered.

Next, I ran free version of SuperAntiSpyware and all it detected was a couple Adware cookies. Secondly, I ran free version of Malware Bytes Anti-Malware and it detected PUP.GamePlayLab infections located in the Registry Key: HKLM\SOFTGWARE\Microsoft\Windows.... These files were removed and quarantined by MWB. Thirdly, I ran Old Timer's TFC and then rebooted the computer and it appeared to run a little faster, but still sluggish while using IE7. So, finally, I ran ESET Free Online Scanner, and it detected "Win32/Toolbar.Babylon and Win32/TopMedia.a" virus infections. Scan took about 2 1/2 hours. I set it to search the drives/ar... Read more

A:Computer runs Slow, Internet slow, Applications slow

Hello, lets look a bit more.Please DownloadTDSSkillerLaunch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.>>>>>>>>Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well.>>>>>>> Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.Finally...MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of Hos... Read more

Read other 15 answers
RELEVANCY SCORE 74.4

Hi.for a couple days now i have been trying to get rid of viruses and malware. It first started with pornbot.com and other icons on my desktop and a fake windows secrity screen saying i need to download an antivirus click here or else my computer will be destroyed.i ran Avast! and it got rid of a virus and then i ran malware btyes and it got rid of the pop ups and porn icons on my desktop but now i am having other problems.First of all the computer is slow. My web browser does not work all the time. IE keeps saying its in offline mode and firefox redirects itself alot. and some virus help sites wont load including this one and antivirus websites.If i click clr-alt-del it says *the system administrator has disabled this feature*.facebook.com says that it is blocked and to unblock it i need to get an antivirus program (i have one!!!).Avast! says it found win32.jifas-co a couple times and win32.patched.ma and deleted them.EDIT:I restarted and now the desktop is green with a image in the middle of it saying WARNING: YOUR SYSTEM IS INFECTED. SYSTEM HAS BEEN STOPPED DUE TO serious MALFUNCION IT IS RECOMMENDED TO USE SPYWARE PREVENTION TOOL TO PREVENT DATALOSS.and i keep getting pop ups all day about buying a program Here is my DDS files.----------------------------------------------------------------------------------------------------------------------------------------------DDS (Ver_09-12-01.01) - NTFSx86 Run by Administrator at 5:42:35.57 on Tue 01/26/2010I... Read more

A:internet sec 2010 on desktop,computer slow.

Hello zappyisfun Welcome to Bleeping Computer. Sorry for delayed response. Forums have been really busy. My name is fireman4it and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts.Please take note of some guidelines for this fix: Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". Finally, please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post. I will be analyzing your log. I will get back to you with instructions after it is approved.

Read other 20 answers
RELEVANCY SCORE 73.6

Hello Everyone,
 
So I go on my desktop computer today and what do you know, the internet is really slow. I do a speedtest on my laptop which is right next desktop, and it has regular internet speeds. However, my desktop is really struggling, at times I can't even load basic pages, let alone play games. It's a custom built PC and I'm using a Netcomm wireless adapter to get a wireless connection (I can't use wired). 
 
What happened?!? Why is this randomly happening? Is my adapter broken? Do I need to update something?
 
Sorry if this in the wrong place.
If you need any more information to help me solve this problem then just ask.
 
Thanks,
~Gun

Read other answers
RELEVANCY SCORE 73.2

Hi,

This problem started a few days ago and I'm not sure what is wrong so I'm going to describe what is happening. My computer is running Windows 7 64-bit. The last thing I remember doing with the computer running fine was watching a stream from justin.tv or a youtube video, followed by a standard computer shut-down. From then on, the computer boots to the login screen at around the same speed as before, but from the login screen to showing the desktop takes over 5 minutes. The screen is black with the white cursor being able to move (my desktop background is not black), so I know my computer is not frozen. After 5-10 minutes, the desktop icons and background show up, but everything runs very slowly, from opening folders and programs. Firefox and internet explorer cannot even load a page and the program freezes.

The computer still runs fine in safe mode and I am able to access the internet and browse fine their. I have run through the suggestions from the slow computer checklist on bleeping computer. In safe mode, I have run complete scans of Malwarebytes, SUPERAntiSpyware and Avira anti-virus with no threats detected. I have also tried running scandisk in an elevated command prompt (as an admin) in safe mode, but I get the message "Windows Resource Protection could not perform the requested operation" and the scandisk never completes. I also ran CCleaner and defraged my computer.

I have no idea what is wrong with my computer and I can't e... Read more

A:Slow boot after login, computer slow once desktop booted

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be foun... Read more

Read other 17 answers
RELEVANCY SCORE 72.8

First my startup became slow, than all aplications were slow, and now my internet. i usea router and the same internet is faster on my laptop but its slow in my current computer here is a hijackthis logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:20:32 AM, on 8/21/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgnsx.exeC:\WINDOWS\system32\SearchIndexer.exeC:\Program Files\Canon\CAL\CALMAIN.exeC:\WINDOWS\system32\dllhost.exeC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\SOUNDMAN.EX... Read more

A:Slow Computer, Slow Start up, Slow Internet

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 5 answers
RELEVANCY SCORE 71.6

I've never seen it run so slow before. It takes it's sweet ass time loading websites, loading programs, EVERYTHING! Can someone take a look at this log and tell me if I've missed something, and what I can do or try to do to fix this.Thank you in advance.Logfile of HijackThis v1.99.1Scan saved at 12:20:25 AM, on 7/6/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Analog Devices\SoundMAX\SMTray.exeC:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.ex... Read more

A:Help! Slow Computer, Slow Internet. Slow, Slow, Slow!

Hi MaryJane,Sorry for the delay, this forum is really swamped right now. I don't see any positive signs of malware in your log, although there is one thing that I am unsure about. I'll get to that in a minute.Before we do rootkit scans and use some other tools to confirm that malware is not the problem, let's do a quick check of resources.Press <Ctrl>-<Alt>-<Del> to open Task Manager, then click on the Processes tab. Place a check next to Show processes from all users. Note the numbers at the bottom, CPU usage should be running at 0 to no more than five percent if your system is idle (no background tasks running). If that is not the case, scroll down and see if any of the processes is running at a high percentage of CPU usage. On a normal system at idle the System Idle Process should show about 98 percent, meaning nothing else is using the CPU. The next columns to the right, memory usage and peak memory usage, may also show something out of line if one process is using a large amount of memory. If you see anything showing high CPU usage or high Memory usage, make a note of it.Now, click the Performance tab. The key numbers here are in the Commit Charge box -- The Total and Peak figures; and in the Physical Memory box, the Total figure. Make a note of these three numbers. I would like to see them, but I can tell you what I'm looking for: basically, any time the Commit Charge exceeds the total physical memory, Windows will have to constantly swap d... Read more

Read other 17 answers
RELEVANCY SCORE 71.6

As stated in this subject. My computer is about 6 months old, recently I have been having issues with it being loud and overall very bogged down. I used Superantispyware, malwarebytes and panda virus. Please help and advise what I can do to correct the issue.
 

A:Very slow computer, loud noise. Internet explorer lags as well as over all the computer is slow.

Welcome aboard

Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

Read other 16 answers
RELEVANCY SCORE 70.4

Lately my internet and computer have been extremely slow, i have broadband internet and its always been very fast until this past week.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:47:46 PM, on 4/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv2.exe
C:\WINDOWS\system32\brvrav32.exe
C:\Program Files\Linksys Wireless-G USB ... Read more

Read other answers
RELEVANCY SCORE 70.4

 Hi The computer  that is slow is a desk top tower. In a home.  it is a E machine.
 it has windows 7  professional  with service pack 1
DO KNOW :  I am very new to windows 7 and all it's features. 
When I brought this computer home  last Nov. it was lightening fast at everything! so much better than  the windows XP  it replaced, I was thrilled.  yet Now starting in  April 2015  it is as slow  or slower  as my old Windows with XP ever was  ( and partially the reason for saving my  pennies to get this windows 7 computer)...and  now I'm upset. feeling  like I have been taken.
 
Computer displays the following :
3.8 windows experience index
Intel pentium dual 2.0Ghz  processor 
64 Bit
 
Has Ccleaner installed
has Comodo antivirus and Comodo cleaning essentials installed.
All virus scans  find no infections,  and report that all is well and protected.  ( B/C of the way the computer is operating i'm doubting that and betting there is an infections of some sort)
 
I Have run Comodo cleaning essentials and  results find no abnormalities or infections.
Have run TFC and JRT  and the computer shows no signs of improvement.
have run rKill  and it  finds  no abnormalities  or infections.
All virus scan results  find no infections.
Windows updates is activated  and  all latest updates have been installed.... Read more

A:Windows 7 computer suddenly slow to get on internet, slow to browse websites etc

Hi flywelder Maybe we aren't looking at an infection here. There's tons of reasons why a system can slow down, and not all of them are malware related. Let's try to take a look at this issue under another angle shall we?MiniToolBoxDownload MiniToolBox and move the executable file to your Desktop;Execute MiniToolBox and check the following options:List Installed Programs;List Last 10 Event Viewer Errors;List Devices - Only Problems;List Users, Partitions and Memory size;Once this is done, click on Go and wait for the scan to complete;Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

Read other 83 answers
RELEVANCY SCORE 70

Could someone please look at my hijack this log? My computer is running painfully slow, especially the internet. I see two suspicious programs in my task manager: exec.exe & x1exec.exe. I really appreciate it! Thanks!

Logfile of HijackThis v1.98.2
Scan saved at 12:27:23 AM, on 8/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\LTSMMSG.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\WINDOWS\System... Read more

A:Slow computer, slow & crashing internet. EXEC.EXE problems?

Read other 7 answers
RELEVANCY SCORE 70

Im looking for some assistance on these two matters.

Firstly my Computer is taking along time to load up at start, I have only uploaded 1 new program in the last month or so and that is PPmate ( a Live steaming program).

I have also noticed that on loading up my internet explorer is very slow to load up my home page.

Please find Hijack this log below:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:36 AM, on 31/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dlcgcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell AIO 810\dlcgmon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WIND... Read more

A:Slow Computer on start up & Internet explorer runng very slow.

Read other 16 answers
RELEVANCY SCORE 70

Windows Vista sluggish operation
Here are logs. Thanks
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:28:45 PM, on 22/01/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\SGPSA\ie3sh.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Freecorder\FLVSrvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Window... Read more

A:Slow computer slow internet response packet loss

Read other 16 answers
RELEVANCY SCORE 70

Basically my computer act as though it has been infected with something but I can not find it.
very recently it has become very sluggish, I have run SpyBot Search & Destroy check, SpywareBlaster, AVG Anti-Spyware, AVG virus scanner without any luck.

Also, recently I have not been able to view YouTube clips, when I try I get the error message 'Hello, you either have JavaScript turned off or an old version of Adobe's Flash Player.' Not sure whether this is related.

Following is a Deckard's System Scanner log, Panda active scan log, Hijackthis log and as suggested attached the DSS extra log.

Any help would be greatly appreciated.



Deckard's System Scanner v20071014.68
Run by Prem on 2008-04-23 11:11:47
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2008-04-23 10:11:50 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Percentage of Memory in Use: 77% (more than 75%).
System Drive C: has 8.48 GiB (less than 15%) free.


-- HijackThis (run as Prem.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:17:17, on 23/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.166... Read more

A:My Desktop pc very slow & very slow internet

Any help would be appreciated.

Read other 1 answers
RELEVANCY SCORE 69.6

Hello, i'll be grateful if you could help us with a problem that we are having with our laptops at home. Let me to explain you, my wife have his own laptop at home, as I have mine laptop too, both of the computers share a wi-fi internet conection. I'm not sure of what's going on but the internet conection it's extremely slowly, sometimes when we reboot our laptops there is no internet conection. According to our ISP there's no problem with the internet conection, they said it could be something with the laptops.

Now, It's true that the two laptops are more slowly, specially my wife's laptop, it takes too long for any processes, I always take a look to the running processes and it seems like there are too much process always but I'm not sure of what is good and whats isn't.

I decided to attach The HiJack log from my wife's laptop, maybe with this you could help us to figure out what's going on.

Thanks for your time!
----
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:04:09, on 10/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos d... Read more

Read other answers
RELEVANCY SCORE 69.6

Hey I recently bought a new computer that is much better than my old one in stats but its not acting like it.

Windows XP
Service Pack 3
Intel Dual Core E5200
2.50GHz
2GB RAM

Now it was running ok to begin with but then the internet started having problems. It kept dropping out or fluctuating in speed and nothing seemed to fix it. It didnt happen on my old system it sat nicely at 54MB/s all the time.

Then the rest of the computer started going slow to start up so i got rid of some start up programs and desktop items which didnt seem to do much. And now ive noticed that when songs are playing in itunes they skip seconds every now and then.

Also when i click for programs to come up after i wait till everything is started up properly i have to wait a minute or two before they open. And burning DVDs has doubled in how long it takes.

Any ideas of what could be wrong, ive scanned for viruses using Avira and spyware using SUPERantispyware, ive cleaned registry using Registry easy and removed all unnecesary crap using CCleaner.

It got suggested that my computer was going slow because of AVG8 so i got rid of it and with got Avira but it slowed up again.

Read other answers
RELEVANCY SCORE 69.6

Hey, basically computer's been a bit slow and tried clearing some stuff and done other things, but still no luck, to make things worse internet's been a lot slow and when using either firefox and internet explorer. For example when going on youtube some videos would freeze in the middle and i would have to reload the page, and sometimes takes ages to load a page.

So here's my DDS log and hopefully the problem can be diagnosed, thank you.




DDS (Ver_09-03-16.01) - NTFSx86
Run by matthewwong at 0:43:48.01 on 21/04/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.510.194 [GMT 1:00]

AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe ... Read more

A:Slow computer+slow internet-not sure if virus related

Bump.

Read other 1 answers
RELEVANCY SCORE 69.6

My computer is running very slow, Internet explorer takes forever to open any page at start up. Any downloads I try to download stall and never finish and I have to shut down the computer to restore it.

Please tell me what I need to do to get your help.

Thanks!
 

A:Slow Internet, downloads stalling, very slow computer

Here is what I got. I am not sure what to do with this information or where I go from here.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:20:49 AM, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Samsung\EmoDio\SMSTray.exe
C:\WINDOWS\system32\LxrSII1s.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messen... Read more

Read other 2 answers
RELEVANCY SCORE 69.6

This is my first time posting a question on bleeping computer. We are so thankful that you are out there to help us and not rip us off. I think my computer is infected. My desktop starts up very slowly, my internet connection is slow (it's slow in pulling up websites and some never come up). I'm getting lots of pop ups (even though pop up blocker is enabled). When I go to open the control panel, a flashlight pops up as if it is looking for it (it eventually does open but it takes a while). I had a problem at one time with a lot of POS.TMP files and followed advice from posts on this site to get rid of them. Well, my current problems started when a friend downloaded a music program. I believe it was called Soundman. When I noticed the computer acting funny, I went into the control panel and deleted it along with some other programs I found (PPC Booster, P2P Max, Ron Tool Adsoftinc, Wyzo, Eco Bar). Any help will be greatly appreciated. Here is my Hiijack This log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:23:41 PM, on 12/24/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\Sy... Read more

A:COMPUTER LOADING SLOW,INTERNET SLOW,POPUPS

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.At first glance I see that you have quite a bit of infection on there.It appears that someone has been doing file sharing on that computer, so the fact that it is infected is understandable. Please remove P2P (file sharing programs) before I clean your computer. The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state.There is a list here: http://spywarehammer.com/simplemachinesfor...php?topic=110.0Following that I will need to see some information about what is happening in your machine. Please perform the following s... Read more

Read other 1 answers
RELEVANCY SCORE 69.6

Hey everybody
This computer is running very slow as well as the internet and I have a feeling it may be due to some adware/malware.

Here's DDS.txt:

DDS (Version 1.1.0) - NTFSx86
Run by Owner at 23:24:08.03 on Sun 12/28/2008
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_05
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.383.92 [GMT -5:00]

FW: COMODO Firewall Pro *enabled*

============== Running Processes ===============

C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Java\jre1.6.0... Read more

A:Possible Spyware Issue (Computer slow, internet slow)

Hi there,


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 3 answers
RELEVANCY SCORE 68.4

EDIT: After doing the Panda scan, it appears my IE home page is no longer hijacked, but my desktop still is and the other problems still persist, although I haven't seen a Norton alert since after I restarted my computer after the Panda online scan, which hasn't been too long now. However, before restarting my computer but after the Panda scan, I was getting the Norton alerts described below.

Hello,

Just today my PC has been under attack from a bombardment of virus popups, my desktop being hijacked, and slowdowns. My Norton Antivirus has automatically deleted some stuff, and I did a scan with that as well as Panda Online scanner, AVG Antivirus and Ad-Aware. I'm still getting some Norton alerts, and my desktop and IE home page are still hijacked. Most noticeably, my PC is running slow, and oddly some things aren't working properly, like I can't open notepad (used Word to view the logs below), and when I right-click on my desktop and hit properties, no window comes up. To combat this, I tried going to the Control Panel and double-clicking Display, but again no window came up. Then out of curiousity, I tried the other Control Panel functions, and none of them were popping up windows when I double clicked them. This is really annoying, and I hope some of you great people can help me out!

The main alerts I've been getting from Norton are W32.Virut.B!dam (http://securityresponse.symantec.com...030710-0506-99), which is scary, since the description s... Read more

A:My PC is infected, running slow, and my desktop and IE home page are hijacked

Read other 16 answers
RELEVANCY SCORE 68

I have recently installed the service pack 1 for windows vista, which caused the computer to shut down without warning, and not start back up without a system restore. My computer is going really slow, the internet connection(with dsl) is only averaging about 70 kb/sec... I am not sure if i have a virus or anything but any help is appreciated. Thank you, here is my system scanner, I followed all the steps before posting =] thank you



Deckard's System Scanner v20071014.68
Run by tkaros on 2008-05-03 09:31:52
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- Last 5 Restore Point(s) --
7: 2008-05-03 10:02:01 UTC - RP268 - Windows Update
6: 2008-05-01 23:51:53 UTC - RP267 - Scheduled Checkpoint
5: 2008-05-01 08:51:52 UTC - RP266 - Scheduled Checkpoint
4: 2008-04-30 06:09:29 UTC - RP265 - Windows Update
3: 2008-04-29 1811 UTC - RP264 - Windows Update


-- First Restore Point --
1: 2008-04-28 10:01:56 UTC - RP262 - Windows Update


Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 1015 MiB (1024 MiB recommended).


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-03 09:39:07
Platform: Windows Vista (6.00.6000)
MSIE: Internet Explorer (7.00.6000.16386)
Boot mode: Normal

Running processes:
C:\Windows\System32\taskeng.exe
C:\Windows\System32\dwm.exe
C... Read more

A:Slow computer, slow internet connection.

B.U.M.P help anyone please?

Read other 2 answers
RELEVANCY SCORE 68

Logfile of HijackThis v1.99.1
Scan saved at 12:26:48 PM, on 11/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Documents and Settings\Shanker\My Documents\hijackthis\HijackThis.exe
C:\PROGRAM FILES\WINKODAK\MSSFDISK.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adbe/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/custo... Read more

A:computer is slow, internet runs slow...

Read other 9 answers
RELEVANCY SCORE 68

Hi! I am new here. I heard this is a great place to post all my computer problems. I hope I can get some help here.

My computer is very slow and so is my internet. I can't manage to get some sites open because it is too slow. I do not know what is wrong with it but it looks like there is a virus or something like that. I do not know exactly what to do but I wish you can help me with this.

This is my hijackThis log file.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:19 PM, on 7/16/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\LANDesk\Shared Files\residentagent.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\LANDesk\LDClient\LocalSch.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\WINDOWS\system32\CBA\pds.exe
C:\Program Files\LANDesk\LDClient\tmcsvc.exe
C:\PROGRA~1\LANDesk\LDClien... Read more

A:Solved: Computer too slow and internet very slow as well.

Read other 16 answers
RELEVANCY SCORE 68

Some kind of trojan invaded my computer I believe. I ran Symantec and it deleted a bunch of entries but the auto-protect kept popping up to block something labeled Downloader and file "kernel32.exe" I was eventually able to delete it in safe mode after turning off the system restore. But then the auto-protect kept blocking Adware.Webbuying with file name qmlqrib.dll (both of these were in system32 folder according to the log), but there was no file by that name anywhere. I ran Ad-Aware which removed two entries with a level 10 threat assessment named BookedSpace and Win32.TrojanClicker, however the Adware.Webbuying continued to be blocked by Symantec. I then ran Spybot which found and deleted numerous entries and I no longer get auto-protect for Adware.Webbuying. However, I continue to get pop-ups, internet is slower, computer is slower, and it seems to prevent downloads after a certain point in time (haven't made it past 20% of a file from various different sites ranging from 4-20 MB). Who knows what else it is doing; hopefully not downloading my personal data. Please lend me a hand if you can. Thanks. I have included my HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 5:18:39 PM, on 6/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svc... Read more

A:Solved: Pop-ups, slow internet, slow computer etc.

Read other 7 answers
RELEVANCY SCORE 68

I've used many of the programs on this site to attempt to clear anything slowing down my computer and taking up bandwidth but SLOW still persists to the point of almost unuseable. If i'm not clean, can you assist? If I am clean...another call to the cable company.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:50:12 PM, on 10/24/2007Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\Program Files\Common Files\TiVo Shared\Beacon\TivoBeacon.exeC:\WINNT\system32\ZONELABS\vsmon.exeC:\WINNT\Explorer.EXEC:\WINNT\System32\WBEM\WinMgmt.exeC:\... Read more

A:Slow Computer And Slow Internet...am I Clean?

Hello fsiracusa,While TeaTimer is an excellent tool for the prevention of spyware, it can sometimes prevent HijackThis from fixing certain things.Please disable TeaTimer for now until you are clean. TeaTimer can be re-activated once your HijackThis log is clean.Open Spybot Search & Destroy.In the Mode menu click "Advanced mode" if not already selected.Choose "Yes" at the Warning prompt.Expand the "Tools" menu.Click "Resident".Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active." box.In the File menu click "Exit" to exit Spybot Search & Destroy.Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to infect your system. Please follow these steps to remove older version Java components and update:Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.Scroll down to where it says "Java Runtime Environment (JRE)6 Update 3...allows end-users to run Java applications".Click the "Download" button to the right.Read the License Agreement and then check the box that says: "Accept License Agreement". The page will refresh.Click on the link to download Windows Offline Installation and save the file to your desktop.Close any programs you may have running - especially your web browser.Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the... Read more

Read other 1 answers
RELEVANCY SCORE 67.2

Hi
I'm experiencing extremely slow internet connection and would like to get some help understanding my hijack log.
By slow I mean that I get 147kb downlad and 2048kb upload on a 10mb/10mb fibre connection.
I've run Malwarebytes' Anti-Malware, blink, ccleaner, spybot and glary utilities without finding anything.
Grateful for any help.
Best regards, Rickard

A:Slow internet connection - have i Been hijacked?

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 62 answers
RELEVANCY SCORE 66.4

I'm hoping someone here will be able to point me in the right direction, because I've been trying to clean my computer since Halloween and I'm about ready to throw it out the window. Here's the history...

Operating System: Windows 98

Sunday night (Oct 31) checking recipe sites and must have gotten hijacked. Page wouldn't load, wouldn't go back, knew something was downloading. Then "Create a Monster" and something about "Bush" came up on the computer. Think it came from a website called kudd.com . Uninstalled all the program references I found. Ran newest version of Ad-Aware and Spybot. Discovered I had 180ax.exe spyware/malware. Followed directions on a website to delete all reference to 180ax.exe using "regedit". Then a popup came up saying I had uninstalled 180ax.exe did I want to re-install. I closed window. This came up a few more times, but hasn't since Sunday night.

Thought things were going to be ok. Wrong.

Now every time I turn on computer, before connecting to the internet, the following popup shows up: "No connection to the internet is currently available. To view internet content that has been saved on your computer, click work offline. Click Try again to attempt to connect. Work Offline. Try Again. I presume this means some program is loading on startup and is attempting to access the internet.

Anyway, I can get online, however, Internet Explorer 6.0 is really slow. Slower than dialup and we're on highspeed. Somet... Read more

A:Computer slow, think it's been hijacked

looking at your log

Read other 19 answers
RELEVANCY SCORE 66.4

Hiya... new kid on the block here. I'm suddenly experiencing multiple problems. My yahoo messenger was hijacked yesterday, I received a server certificate error today that claims someone may be eavesdropping on me, the comp is getting slower and slower, and the startup and shut down is getting longer and longer. This is a used laptop that I received with issues to begin with. I thought the issues were resolved, but instead, they keep getting worse. I'm not familiar with HJT, and don't know where to start. Any help would be greatly appreciated! Thanks in advance! ~Jesica

The puter is an HP Compaq 6730s
Running Vista Home Basic SP2, Build 6002
I'm using Trend Micro Internet Security Pro
I normally use Opera, but also have Firefox and IE

The error I received in Opera today reads in part: "The server's certificate did not match it's hostname. Accept?" The security tab says "The server's name does not match the certificate's name. (webpage and server info) Somebody may be trying to eavesdrop on you."

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 8:09:56 PM, on 3/4/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\windows\system32\taskeng.exe
c:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Activ... Read more

Read other answers
RELEVANCY SCORE 65.6

Hi Guys

My daughters laptop is running very slow, the internet searches are being hijacked though something called Babylon (although I may have been able to delete that). The 40 GB hard drive is showing as almost full but the size of all the folders added together doesn't come anywhere near to 40GB. There is a folder called "e98f988dcc6bbb7b982e" which is full of folders each titled with just a number and when I try to open them it says I don't have permission. This is strange as there is only one user account on the computer and it is an administrators account.

If any of the above doesn't make sens i apologise but I am no computer genius, just a mere novice.

I have just installed Avast free antivirus to it.

I have attached the relevant logs. Any help would be appreciated.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:08:52, on 26/04/2014
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18639)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Advent\AIO\StatusMonitor\ADStatusMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\igfxsrvc.exe
C... Read more

A:Laptop, internet searches being hijacked and system slow

Read other 9 answers
RELEVANCY SCORE 65.6

Dear BP: tried everything I know from studying your site & experiencing satisfactory results in recent years, this seems a difficult one:  Hijack this, GMER, Malwarebytes, SuperAntispyware etc. Nothing exposes or eleminates this net blocking virus or malware so far.  Please help.  Thanks Ljmac 

A:Browsers hijacked; no internet connection slow PC~ Windows 8 Pro

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

Read other 6 answers
RELEVANCY SCORE 65.6

Hi,

This is a great site. Really hope you can help. This is an older PC that I've updated throughout the years. Kids have gotten onto some gaming sites. It is painfully slow, especially starting up and coming out of hibernation. Sometimes I have to reboot just to get it to run faster. It would not surprise me if it has been hijacked and its resources being used in another network somewhere. I'll include requested log info below, though I'm having a difficult time getting the GMER scan to complete, even with the IAT/EAT box unchecked and hitting only the C: drive.

Sys info:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4200+, x86 Family 15 Model 43 Stepping 1
Processor Count: 2
RAM: 958 Mb
Graphics Card: ATI RADEON XPRESS 200 Series, 256 Mb
Hard Drives: C: Total - 230262 MB, Free - 190896 MB; D: Total - 8194 MB, Free - 982 MB;
Motherboard: MSI, AMETHYST-M
Antivirus: None
DDS.txt:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by HP_Administrator at 19:29:30 on 2013-04-28
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.115 [GMT -4:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServ... Read more

A:Need help with an extremely slow and probably hijacked computer

Read other 15 answers
RELEVANCY SCORE 65.6

These people need to be smacked! I have programs in my system that I do not want. I am getting pop ups and my new computer is running like an old one. What should I kill in the below hijackthis?

Thank you very much for your help...

C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: PowerSearch - {4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D} - C:\PROGRA~1\POWERS~1\Toolbar\pwrsbikd.dll (file missing)
O3 - Toolbar: Way Idol - {7EF7AE8C-FA70-496D-C60F-296C9A1CA840} - C:\PROGRA~1\TIMEBL~1\Moderect.dll (file missing)
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra conte... Read more

A:I'v been hijacked! New computer running slow - many pop-ups please help...

Read other 10 answers
RELEVANCY SCORE 65.6

Hello everyone,
 
I'm trying to solve the problems on this computer. Browsers have been hijacked and it's overall performance is not good. Have tried running adaware but it has not helped. Here are the logs, I look forward for your help.
 
Thanks in advance,
Felipe Mazza
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 15:29:19, on 10/01/2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
 
FIREFOX: 25.0.1 (pt-BR)
Boot mode: Normal
 
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Windows\system32\igfxEM.exe
C:\Windows\system32\igfxHK.exe
C:\Windows\system32\igfxTray.exe
C:\Program Files\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Users\Rita\Downloads\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.co... Read more

A:Hijacked browsers and slow computer - Log

Good afternoon.
Actually, took the easy way out on this one and have started a full format. 
 
Moderators,
please close this topic.
 
Regards,
Felipe

Read other 2 answers
RELEVANCY SCORE 65.6

Computer VERY slow. Everyone in my address book has gotten some kind of ad, e.g. viagra, or other nonsense. I have attached dds.txt and attach.txt. I have been unable to do GMER. I've run it about 6 times and it locks up each time. I did run Combofix (my brother recommende I do so!) before I noticed saw the instructions which said not to until told to do it. I hope that didn't screw things up...but it didn't fix the problem, whatever it is. (I took no action based on Combofix.)
Today, the computer is acting like I'm starting it for the first time, e.g. asking if I want to run the laptop tutorial and my Firefox bookmarks are gone.
Here is dds.txt:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_29
Run by Spencer at 22:51:33 on 2011-12-19
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1185 [GMT -8:00]
.
AV: The Shield Deluxe Antivirus *Enabled/Outdated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: The Shield Deluxe 2008 *Disabled/Outdated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: The Shield Deluxe 2008 *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\Program Files\Common Files\The Shield Deluxe\The Shield Deluxe Update Service\livesrv.exe
C:\Program Files\The Shield Deluxe\The Shield Deluxe 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe -... Read more

Read other answers
RELEVANCY SCORE 65.6

I've running adaware, spybot search and destroy, cwshredder, and hijack this.
But I still have things happening. Can't sp2 to download. I can't send a log, when I try to save it I get the black screen c:\windows\system32\notepad.exe with a bunch of computer mumbo jumbo
running xp.. dell dimension 2400
help
Dawn
 

A:spyware, slow computer,hijacked..

Read other 16 answers
RELEVANCY SCORE 65.6

Slow computer, I think browser (and more?) have been hijacked, I've never used hijack this before and want to be sure about what I am doing before I delete things.  Can someone please check this for me?  I ran Hijack This in safe mode (iregular mode Hijack This is prevented from writing a log) and here is the log:
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 3:46:18 PM, on 4/3/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
FIREFOX: 36.0.4 (x86 en-US)
Boot mode: Safe mode
Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Users\OurJesterPC\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://gmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\C... Read more

A:Slow computer, I think browser (and more?) have been hijacked

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery... Read more

Read other 5 answers
RELEVANCY SCORE 65.6

So I am very inexperienced in removing threats from my computer. Lately my computer has been running incredibly slow and the CPU has shot up to close to 100%. When I open the task manager, I see some things running that aren't familiar, and after looking them up online, I see that they are harmful to my computer. These unfamiliar items include: ATKOSD.exe, ATKOSD2.exe, csrss.ese, HControl.exe, igfxpers.exe, igfxsrvc.exe, igfxtray.exe, WDC.exe, winlog.exe. I am a student and I use my laptop for all of my school related computer needs. I have been looking for help for about a week now and came across this site which seems to be the most promising. Thanks in advanced to all that can help me. I have been told that my computer might be infected beyond the point where I can do this on my own with my limited knowledge. I would be willing to let someone access my laptop if they can verify that they helped people in the past and are kind of enough to perform such a task. I do not have a windows install disc or a boot CD.



DDS (Ver_10-12-12.02) - NTFS_AMD64
Run by John at 8:16:24.30 on Tue 12/21/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3885.2510 [GMT -8:00]

AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1A... Read more

Read other answers
RELEVANCY SCORE 65.6

Hi, I'll appreciate any advice on how to fix my friend's computer. Here's the HJT log.

Logfile of HijackThis v1.99.1
Scan saved at 7:00:59 PM, on 9/22/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\WINDOWS\SGVucnk\command.exe
C:\Program Files\Network Monitor\netmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ishost.exe
C:\WINDOWS\System32\isnotify.exe
C:\WINDOWS\System32\issearch.exe
C:\WINDOWS\System32\ismini.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\ /Lotame 9\Update.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\System32\lxcgc... Read more

A:Computer Snailish Slow, Hijacked

Hi
Looks klike you have a bit to fix so lets start with this first..

Download SmitfraudFix (by S!Ri) to your Desktop.
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.


Open the SmitfraudFix folder and double-click smitfraudfix.cmd


Reboot your computer in Safe Mode.
If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Hi you have a bit to sort out here so lets start with this....


Open the SmitfraudFix Folder, then double-click smitfraudfix.cmd file to start the tool.
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection


The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. ... Read more

Read other 13 answers
RELEVANCY SCORE 65.6

--------------------------------------------------------------------------------


Computer:
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 2
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name DANIELS2GHZ (Erck's Computer )
User Name Daniel

Motherboard:
CPU Type Intel Celeron, 2000 MHz (20 x 100)
Motherboard Name TriGem eMachines Imperial
Motherboard Chipset Intel Brookdale-G i845GL
System Memory 640 MB (PC2100 DDR SDRAM)
BIOS Type Phoenix (11/20/02)
Communication Port Communications Port (COM1)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter Intel(R) 82845G/GL/GE/PE/GV Graphics Controller (64 MB)
3D Accelerator Intel Extreme Graphics
Monitor Sampo AlphaScan 777 (000001)

Multimedia:
Audio Adapter Intel 82801DB ICH4 - AC'97 Audio Controller [B-0]

Storage:
IDE Controller Intel(R) 82801DB Ultra ATA Storage Controller - 24CB
Floppy Drive Floppy disk drive
Disk Drive WDC WD400EB-00CPF0 (37 GB, IDE)
Disk Drive Maxtor 6Y080L0 (80 GB, 7200 RPM, Ultra-ATA/133)
Disk Drive ST332082 0A USB Device (298 GB, USB)
Optical Drive HL-DT-ST CD-RW GCE-8400B (40x/12x/40x CD-RW)
Optical Drive Memorex DVD16+/-DL4RWlD2
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 38162 MB (6375 MB free)
... Read more

Read other answers