Over 1 million tech questions and answers.

Slow computer & requests for ATM PIN

Q: Slow computer & requests for ATM PIN

Hi,

I wonder if some kind soul can help with my computer issue. When in IE, the computer runs very slow and on commercial sites, incluing ebay, I get pop ups asking for bank and ATM PIN details. I have never had either problem before.

I have run various virus checkers including McAfee, Malwarebytes, and Superantispyware, all to no avail.

As instructed, the log files from Hijack and DDS are pasted below. The DDS attach file is attached.

Thanks in advance.

Regards,
Chez

Hijack file:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:36:57, on 04/04/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
C:\Program Files (x86)\WinZip\WZQKPICK.EXE
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.packardbell.com/?id=9088
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120402222620.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [basicsmssmenu] "C:\Program Files (x86)\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe"
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
O4 - HKLM\..\Run: [3180 Scan2PC] "C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [PrinterShare] C:\Program Files (x86)\PrinterShare\paConsole.exe -minimized
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files (x86)\Logitech\Vid HD\Vid.exe" -bootmode
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Chris Brooks\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: upatrol - Shortcut.lnk = C:\Program Files (x86)\UpdatePatrol\upatrol.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} - http://www.linkedin.com/cab/LinkedInContactFinderControl.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {80AEEC0E-A2BE-4B8D-985F-350FE869DC40} - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsVista.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.warwick.ac.uk/newwebcam/AxisCamControl.ocx
O16 - DPF: {A1F35586-A5A8-4D37-947A-81875350B11F} - http://webalbum.bonusprint.com/ukipc01/downloads//ImageUploader4.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\explorerframe.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Basics Service - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Basics\Service\SyncServicesBasics.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\SysWOW64\rpcnet.exe
O23 - Service: Samsung Network Fax Server - Samsung Electronics Co., Ltd. - C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 16356 bytes

DDS File:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Chris Brooks at 15:53:16 on 2012-04-04
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3838.1933 [GMT 1:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\nvvsvc.exe
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
C:\Windows\system32\rundll32.exe
C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe
C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\rpcnet.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files (x86)\WinZip\WZQKPICK.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files (x86)\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Windows\Samsung\PanelMgr\caller64.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\notepad.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = https://www.google.co.uk/
uDefault_Page_URL = hxxp://go.packardbell.com/?id=9088
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://uk.search.yahoo.com/search?fr=mcafee&p=%s
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
mWinlogon: Userinit=userinit.exe,
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120402222620.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
{555d4d79-4bd2-4094-a395-cfc534424a05}
uRun: [PrinterShare] C:\Program Files (x86)\PrinterShare\paConsole.exe -minimized
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [Logitech Vid] "C:\Program Files (x86)\Logitech\Vid HD\Vid.exe" -bootmode
uRun: [Akamai NetSession Interface] "C:\Users\Chris Brooks\AppData\Local\Akamai\netsession_win.exe"
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun: [basicsmssmenu] "C:\Program Files (x86)\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe"
mRun: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
mRun: [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
mRun: [3180 Scan2PC] "C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe"
mRun: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\Users\CHRISB~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files (x86)\Dell\DellDock\DellDock.exe
StartupFolder: C:\Users\CHRISB~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\UPATRO~1.LNK - C:\Program Files (x86)\UpdatePatrol\upatrol.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\WINZIP~1.LNK - C:\Program Files (x86)\WinZip\WZQKPICK.EXE
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: ocs.co.uk\extranet
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} - hxxp://www.linkedin.com/cab/LinkedInContactFinderControl.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {80AEEC0E-A2BE-4B8D-985F-350FE869DC40} - hxxp://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsVista.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} - hxxp://www.warwick.ac.uk/newwebcam/AxisCamControl.ocx
DPF: {A1F35586-A5A8-4D37-947A-81875350B11F} - hxxp://webalbum.bonusprint.com/ukipc01/downloads//ImageUploader4.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\244524573796E6563737845726D2834383 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\244524573796E6563737845726D2834383F5548545 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\343534D23545146464D274 : DhcpNameServer = 172.16.10.254 10.0.0.1
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\34842594352425F4F4B435D2053423F5E4564777F627B6 : DhcpNameServer = 192.168.1.250
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\4586F6D637F6E6549323934424 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\96261686E6F536F6E666562756E63696E676 : DhcpNameServer = 172.16.2.5 12.129.240.11
TCP: Interfaces\{BA4F15AF-E0DD-42EB-ADBB-5F839D1E4F5D}\A4572797370294E6E602D20274575637470275966496 : DhcpNameServer = 208.67.222.222 208.67.222.220
TCP: Interfaces\{F288F55F-BBC5-460B-859F-8E4DDE7A9C72} : DhcpNameServer = 192.168.1.1 62.6.40.162 194.74.65.69
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\McAfee\MSC\McSnIePl.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\McAfee\SITEAD~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\McAfee\SITEAD~1\McIEPlg.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
BHO-X64: 0x1 - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
BHO-X64: Search Helper - No File
BHO-X64: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120402222620.dll
BHO-X64: scriptproxy - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
BHO-X64: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
TB-X64: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
TB-X64: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
TB-X64: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
TB-X64: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
EB-X64: {182EC0BE-5110-49C8-A062-BEB1D02A220B} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
mRun-x64: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun-x64: [basicsmssmenu] "C:\Program Files (x86)\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe"
mRun-x64: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
mRun-x64: [CLX3180_Scan2Pc] C:\Windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
mRun-x64: [3180 Scan2PC] "C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe"
mRun-x64: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
============= SERVICES / DRIVERS ===============
.
R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\system32\drivers\mfehidk.sys --> C:\Windows\system32\drivers\mfehidk.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 mfenlfk;McAfee NDIS Light Filter;C:\Windows\system32\DRIVERS\mfenlfk.sys --> C:\Windows\system32\DRIVERS\mfenlfk.sys [?]
R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\system32\drivers\mfewfpk.sys --> C:\Windows\system32\drivers\mfewfpk.sys [?]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-12 140672]
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-9-30 169408]
R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]
R2 LVPrcS64;Process Monitor;C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe [2010-5-7 197976]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [2012-2-23 103440]
R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-7-1 249936]
R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-7-1 249936]
R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-7-1 249936]
R2 McShield;McAfee McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [2010-4-26 199272]
R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [2010-4-26 208536]
R2 mfevtp;McAfee Validation Trust Protection Service;C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-4-26 161168]
R2 Samsung Network Fax Server;Samsung Network Fax Server;C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe [2011-9-2 216576]
R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2010-1-8 656624]
R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.SYS [2011-9-2 11576]
R2 UMVPFSrv;UMVPFSrv;C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe [2011-8-19 450848]
R3 cfwids;McAfee Inc. cfwids;C:\Windows\system32\drivers\cfwids.sys --> C:\Windows\system32\drivers\cfwids.sys [?]
R3 CompFilter64;UVCCompositeFilter;C:\Windows\system32\DRIVERS\lvbflt64.sys --> C:\Windows\system32\DRIVERS\lvbflt64.sys [?]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 itecir;ITECIR Infrared Receiver;C:\Windows\system32\DRIVERS\itecir.sys --> C:\Windows\system32\DRIVERS\itecir.sys [?]
R3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\system32\DRIVERS\LVPr2M64.sys --> C:\Windows\system32\DRIVERS\LVPr2M64.sys [?]
R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\system32\DRIVERS\lvrs64.sys --> C:\Windows\system32\DRIVERS\lvrs64.sys [?]
R3 LVUVC64;Logitech HD Pro Webcam C910(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\system32\drivers\mfeavfk.sys --> C:\Windows\system32\drivers\mfeavfk.sys [?]
R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\system32\drivers\mfefirek.sys --> C:\Windows\system32\drivers\mfefirek.sys [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files (x86)\CyberLink\PlayMovie\000.fcl [2008-6-10 41456]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-12-28 136176]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
S3 FACAP;facap, FastAccess Video Capture;C:\Windows\system32\DRIVERS\facap.sys --> C:\Windows\system32\DRIVERS\facap.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-12-28 136176]
S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\system32\drivers\mferkdet.sys --> C:\Windows\system32\drivers\mferkdet.sys [?]
S3 mferkdk;McAfee Inc. mferkdk;C:\Windows\system32\drivers\mferkdk.sys --> C:\Windows\system32\drivers\mferkdk.sys [?]
S3 mfesmfk;McAfee Inc. mfesmfk;C:\Windows\system32\drivers\mfesmfk.sys --> C:\Windows\system32\drivers\mfesmfk.sys [?]
S3 RoxMediaDB10;RoxMediaDB10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCom\RoxMediaDB10.exe [2009-6-26 1124848]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-04-04 12:24:59 388096 ----a-r- C:\Users\Chris Brooks\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-04 12:24:56 -------- d-----w- C:\Program Files (x86)\Trend Micro
2012-03-30 10:41:59 -------- d-----w- C:\Users\Chris Brooks\AppData\Roaming\SUPERAntiSpyware.com
2012-03-30 10:40:48 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-03-30 10:40:48 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-03-25 11:11:21 35892 ----a-w- C:\Windows\SysWow64\SER9PL.sys
2012-03-25 11:11:21 26719 ----a-w- C:\Windows\SysWow64\SERSPL.VXD
2012-03-25 11:09:50 -------- d-----w- C:\Users\Chris Brooks\AppData\Local\{C3F37493-D209-4BBF-9972-EA63D80EE010}
.
==================== Find3M ====================
.
2012-04-04 09:59:10 17408 ----a-w- C:\Windows\System32\rpcnetp.exe
2012-04-04 09:59:07 58288 ----a-w- C:\Windows\SysWow64\rpcnet.dll
.
============= FINISH: 15:55:20.07 ===============

RELEVANCY SCORE 200
Preferred Solution: Slow computer & requests for ATM PIN

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Slow computer & requests for ATM PIN

Read other 8 answers
RELEVANCY SCORE 46.8

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:18:08 PM, on 6/12/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\Internet Everywhere 3G+\Internet Everywhere 3G+.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - H... Read more

A:hijackthis log, my computer is sending automated requests

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

Read other 3 answers
RELEVANCY SCORE 46.4

I have 24X7 internet on my computer. At times, I leave my computer unattended. Is there a way for me to find out logs that can tell me what all URLs/IPs is being requested by softwares in my computer. Is there any sort of good (open source) software available for this? Is there a log on my computer already? Your help requested!
 

Read other answers
RELEVANCY SCORE 46

DDS (Ver_09-01-18.01) - NTFSx86
Run by Kay at 21:41:16.29 on Sun 01/18/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.318 [GMT -8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Outdated)
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Outdated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MICROS~2\rapimgr.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS&... Read more

A:"Your computer (IP: xx.xxx.xxx.xxx) generates an attacking DOS requests at our servers. This attack was provoked by the spy...

Hi

If you still need help post a fresh DDS log, please.

Read other 2 answers
RELEVANCY SCORE 44

My apologies in advance if I'm in the wrong place but I came across this site and am desperate for help. I'm not that great when it comes to tech issues but I've tried to do some of the things I've read here and I'm still in big trouble. Here's the story:

Yesterday I see a message from my Symantec saying that they found something. I've seen that before and usually run a scan with Symantec and then run Malwarebytes anti-malware and things get cleaned up. But not this time. Both programs found some stuff and cleaned it out but I'm having crazy problems now. First, if I try to turn my computer on normally, when it loads up windows i get a light blue screen and cursor and that's it. So I'm forced to reboot and get a screen offering me the option of safe mode, safe mode with network, log in under last stable time, and a few other options. I tried getting in to the safe mode but my username and password aren't accepted so I can't get in there. When I choose to log in using the last time things were stable I get in and all looks okay. For 2 seconds. Then I get found new hardware message popping up. I can't get rid of them unless I go into my system and disable or uninstall the hardware with question marks (there are like 20 of them listed, which weren't there before). And no matter what I do the new hardware message comes back the next time I reboot. I also get messages popping up from Symantec saying that I have an HTTP Tidse... Read more

Read other answers
RELEVANCY SCORE 38.8

As stated in this subject. My computer is about 6 months old, recently I have been having issues with it being loud and overall very bogged down. I used Superantispyware, malwarebytes and panda virus. Please help and advise what I can do to correct the issue.
 

A:Very slow computer, loud noise. Internet explorer lags as well as over all the computer is slow.

Welcome aboard

Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

Read other 16 answers
RELEVANCY SCORE 38.4

(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files... Read more

A:computer slow to boot, slow response, very slow internet, fans on high - HJT log

Any thoughts, anybody?

catillac said:


(adding system info):
Dell M90, Vista, all updates current.
Wireless: AT&T Expresscard

Concurrent wil all this, something is resetting my trackpad settings back to default on every reboot. Solved this last summer by removing something from Logitech, but the problem is back now. Weird.

Internet MUCH slower than usual, responses sluggish on- and offline. System fans kick on within 2-3 minutes of startup. I've run all the usuals - McAfee, Ad-Aware, SpyBot, disk cleanup, and chkdsk. Hard boot after all that, then ran HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:36 PM, on 2/27/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\CSR\Vista Profile Pack\BtHidUi.exe
C:\Windows\sttray.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Microsoft... Read more

Read other 1 answers
RELEVANCY SCORE 38.4

My computer is unusually slow and it takes up to 10-15 minutes just for my computer to completely start up.

Here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:34:18 AM, on 12/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files... Read more

Read other answers
RELEVANCY SCORE 38

For some odd reason, in the past 4 weeks, my streaming video has become VERY slow, and I do not know why. I have a high-speed cable connection, the same I have had for the past 6 months. It is slow, sound-with-stil-images and/or constantly rebuffering, and this is true with WIndows Media, Winamp, Realplayer and even Flash videos (on YouTube for example). I cannot take it anymore. I tried this Hijackthis thing, and this is my log:

Logfile of HijackThis v1.99.1
Scan saved at 3:58:08 PM, on 7/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Sophos\Remote Update\cachemgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\sophos\remote update\imonitor.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sophos SWEEP for NT\S... Read more

A:Slow internet, slow video streaming, slow computer... aaaaah!

Please, somebody.
 

Read other 2 answers
RELEVANCY SCORE 37.2

Running older PC Clone 2.0 Ghz Dual CPU Pentium, 1GB Ram Win XP Home Edition system.

While navigation on Internet Explorer or Google Chrome, system runs extrememly slow and/or crashes. When using applications such as Itunes, Email, or simply opening up Word and other applications, it runs very slow and almost seems to stop. The IE7 that was on the computer had changed to an operate with add-ons off as a result of the infection. I downloaded and reinstalled IE7 and this seems to have fixed that problem for the time being. MalwareBytes and SuperAntiSpy icons dissappeared from my desktop. When trying to use them from the Start / Menu options the programs no longer worked. I reinstalled them and they appear to work fine now. However, the system still seems to run very slow over all and its performance is greatly hindered.

Next, I ran free version of SuperAntiSpyware and all it detected was a couple Adware cookies. Secondly, I ran free version of Malware Bytes Anti-Malware and it detected PUP.GamePlayLab infections located in the Registry Key: HKLM\SOFTGWARE\Microsoft\Windows.... These files were removed and quarantined by MWB. Thirdly, I ran Old Timer's TFC and then rebooted the computer and it appeared to run a little faster, but still sluggish while using IE7. So, finally, I ran ESET Free Online Scanner, and it detected "Win32/Toolbar.Babylon and Win32/TopMedia.a" virus infections. Scan took about 2 1/2 hours. I set it to search the drives/ar... Read more

A:Computer runs Slow, Internet slow, Applications slow

Hello, lets look a bit more.Please DownloadTDSSkillerLaunch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.>>>>>>>>Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well.>>>>>>> Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.Finally...MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of Hos... Read more

Read other 15 answers
RELEVANCY SCORE 37.2

My computer is extremely slow all of a sudden. I fallowed the links to a slow computer but was unable to get it to improve.

Logfile of random's system information tool 1.04 (written by random/random)
Run by Administrator at 2008-10-27 09:59:50
Windows Windows Vista? Extreme Edition Service Pack 1
System drive C: has 101 GB (64%) free of 159 GB
Total RAM: 1023 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:00:05 AM, on 10/27/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\... Read more

A:[SOLVED] Slow Slow Slow computer. Followed all links to fixes

TTT BUMP TTT. Can anyone take a look at this. Its really driving me crazy.

-Jay

Read other 6 answers
RELEVANCY SCORE 36.4

I don't know if this should go here or elsewhere but I am attempting to find a new gamertag for my xbox profile on the xbox.com account management page. After I make 20 or so checks for availability an error shows up below the input field saying an unexpected
error has occurred. This message does not stop showing up unless I wait a couple days which makes finding a new name very difficult. Am I being blocked by the server or is this another issue?

Read other answers
RELEVANCY SCORE 36.4

i cannot enter captcha on any site as i cant see it for some reason i have attached few images which shows the cause of my problem.i have scanned my pc with multiple antivirus but nothing found."]3rd image is tested using Ubuntu but of no use. hope some one can help me as i found no solution for my problem which is causing problems in registering on various sites.i can enter captcha on very few sites eg. - YouTube.but it also says too many request from my network.thank you.

A:too many requests but from where??? help!!!!!!!

Hmm, have you tried clearing you cache?

Read other 4 answers
RELEVANCY SCORE 36

Dear all .....
please help me my windows need format or repair cos when i start up get slow speed and when connection to internet also slow too . what happen for my windows /. please help me. Thanks and regards.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:26:36 PM, on 21/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.ex... Read more

Read other answers
RELEVANCY SCORE 36

First my startup became slow, than all aplications were slow, and now my internet. i usea router and the same internet is faster on my laptop but its slow in my current computer here is a hijackthis logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:20:32 AM, on 8/21/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgnsx.exeC:\WINDOWS\system32\SearchIndexer.exeC:\Program Files\Canon\CAL\CALMAIN.exeC:\WINDOWS\system32\dllhost.exeC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\SOUNDMAN.EX... Read more

A:Slow Computer, Slow Start up, Slow Internet

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 5 answers
RELEVANCY SCORE 36

Hi there all,

I am using a Vodafone 3G Modem om my pc, however I cant send receive USSD commands .. is the software that you can direct me towards that I can use. I am using the Cell C Network in South Africa. I have searched on the net and most of the stuff I find simply doesnt work. If possible could someone assist me wit this request? Just a nice & simple interface that actualy works.
Kind regards

Read other answers
RELEVANCY SCORE 36

hello mates... i am facing problwm from few days back that when i send request then i get a message i forgot.. can any one plz help me?

A:MSN requests problem

plz help me frieds..

Read other 2 answers
RELEVANCY SCORE 36

I'm a programmer, and installed wireshark on my xp machine to do some tcp/ip work. I noticed, even with no programs running I get a constant stream of dns requests to my routers ip.

the requests look like this:
46189 3959.607565 192.168.2.2 192.168.2.1 DNS Standard query PTR 4.160.15.219.in-addr.arpa

46247 3991.834562 192.168.2.2 192.168.2.1 DNS Standard query PTR 210.168.161.188.in-addr.arpa

46201 3972.852314 192.168.2.2 192.168.2.1 DNS Standard query PTR 20.71.103.82.in-addr.arpa

and the responses look like this:
46212 3985.801191 192.168.2.1 192.168.2.2 DNS Standard query response PTR WL.hsd1.fl.comcast.net

46206 3980.680231 192.168.2.1 192.168.2.2 DNS Standard query response PTR pool-173-67-9-33.bltmmd.fios.verizon.net

46199 3968.951943 192.168.2.1 192.168.2.2 DNS Standard query response PTR c-75-70-255-177.hsd1.co.comcast.net

From what I can gather, the requests all look like home isps. There also seems to be a lot of foreign countries like .br and .jp a lot. Has anyone seen anything like this before?
 

A:weird dns requests

welcome to TSG

have you googled all those names? there seems to be no warnings about them
 

Read other 1 answers
RELEVANCY SCORE 36

It's time for me to replace my old HP 200LX, and I can't seem to find a PDA that is suitable. Here are my search criteria:

I am 50 & my eyes aren't as good as they used to be.
I need a decent sized display (Palm Pilot types are
too tiny).

Besides the usual PDA (calendar, contacts, etc.), I want
to be able to run some Excel spreadsheets. My spread-
sheets can be robust, so I prefer a landscape display,
not the portrait shape of Palm Pilot type PDAs). Bonus
points for syncing up with my Quicken on my PC.

Connecting & syncing with my Windows PC is a good
idea. This device should augment my PC, not replace it.
(I do use MS Outlook).

My handwriting is horrible -- I need a keyboard, but
the keyboard can be small -- I don't mind hunting &
pecking on the PDA. I also don't mind navigating with
arrow keys.

Ideally, I'd like something about the size of a paperback book. I don't want a full sized laptop -- laptops are a bit big & too expensive. Finally, it would be nice if the device had modern conveniences, like ability to play MP3 files, surf the net, play some basic games, etc. I also wouldn't exclude from consideration any PDA / cell phone combination (although I don't have/use a cell phone yet).

Thanks in advance.run some Excel spreadsheets
 

A:PDA Recommendation Requests

Read other 6 answers
RELEVANCY SCORE 36

Well, when I installed IE8, it requested to run add-ons on websites:On some web-sites I ran this add-ons:but, when I run add-ons IE displays Security Warning:I have already installed Adobe Flash Player 10 ActiveX and Adobe flash player plugin, but I think one of them is Opera's Which of them should I run? Run add-on on each website or run add-ons on all websites?

A:IE 8 requests to run add-ons on websites

You can safely run Adobe flash player. That warning is just to let you know that this add-on was already there and asks you to confirm that you want to run it.
Its up to you if you want to decide for every site apart with flash-content if you want to run it or if you want to enable it for all sites. Its no security risk to allow it for all sites.

Read other 5 answers
RELEVANCY SCORE 36

Is there a place that we can leave feedback or requests for the ATA product?

There are a few things i would like to see changed.  

1.  Alerting
We get alerts during backup windows that the ATA cant keep up but it doesn't seem to have anything to do with CPU or RAM.  In addition, we have no users in the system at that time so i find it very hard to believe
that this is true.  I would like to set time windows where we can exclude these alerts or maybe thresholds where if it is seeing that for 5 minutes, 10 minutes etc.
2.  Email Audience
I would like to be able to say these types of emails go to this distribution list and those go to another so that we keep the number of alerts the team gets down a bit.  
3.  Suspicious Activity
When we get an alert warning of suspicious activity and click the link to take a look, the first thing you have to do is answer whether it is normal or not, but we cant click the link to see the suspicious activity unless
we open the excel file in the email.  This should be adjusted.  

Read other answers
RELEVANCY SCORE 36

I set up family safety for my 12 year old daughter, and ticked all the apps she can use freely. Every time she logs on the computer it pops up little messages telling her to request permission to use all the apps that I didn't give her access to. It's very annoying, so how do I stop it, other than the obvious but unhelpful step of letting her access everything?

A:Permission requests

Hello Andy, and welcome to Eight Forums.

The apps that are checked are the ones that are blocked instead. Only the unchecked ones are allowed.
Family Safety App Restrictions - Set and Manage in Windows 8
When you get a request to allow an app and either allow or block it as per the tutorial below, you and the user should not see the messages for that app anymore.

Family Safety Requests - Send and View in Windows 8
Hope this helps for now,
Shawn

Read other 1 answers
RELEVANCY SCORE 36

O2 - BHO: (no name) - {cd6caa5d-7035-43dc-abea-a89090a098fd} - C:\WINDOWS\system32\boheyuje.dll
O4 - HKLM\..\Run: [kagizoriha] Rundll32.exe "C:\WINDOWS\system32\kuririme.dll",s
O20 - AppInit_DLLs: C:\WINDOWS\system32\rirebuva.dll

The above lines from hijackthis seems suspicious and is persistent (returns after deletion). I think they are linked to the problem I am having with kasperski detecting requests to get to the address 77.74.48.105 to download what it thinks is malware from programs IE and win 32 services. It may even be causing my IE7 to not function once opened (currently using firefox).

A:PC slowdown; requests to 77.74.48.105

Howdy, my name is Hoov, and I will be helping you with your dilemma. I appologize for the delay in getting you help.Please make sure you watch this thread for responses. If you click the options tab at the top of your first post, you can select to track this thread. Here is what I am asking you to do during the repair of your computer*Tell me everything that you have done, if anything, to try and fix this problem.*Please only use 1 forum to help clear up your problem. Posting on more than 1 and following instructions from more than 1 forum will cause those helping you to pull out thier hair.*Follow my instructions - If you can't for some reason, or if you don't understand something, please tell me. If you deviate from my instructions, tell me, it may make a difference on where we go. Don't install anything, even other programs that have nothing to do with security or malware, it could cause things to change, and I would never know it. *Have faith. I will do all I can to get your computer working, and if I can't - someone else here will know something else to try. *Stick with me to the end. My aim is to fix your problems, and give you the tools and knowledge to keep this from happening again.Now onto trying to fix your computer.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, f... Read more

Read other 3 answers
RELEVANCY SCORE 36

this keeps coming up day in day out and it's getting o be a pain

pic of IRQ's from device manager attached

is there a fault/issue with any?
 

A:Multiple IRQ Requests

This May Help
http://forum.notebookreview.com/showthread.php?t=54401
 

Read other 1 answers
RELEVANCY SCORE 36

Please read this carefully before posting.
The idea:
This thread is meant to collect user's request of new features to add to Windows 7, or to bring back features that were taken out since XP / Vista, and are sorely missed.
The idea is to create a list that MS might want to take a look at.
For this to have a chance, we need to keep the thread clean, and free of unnecessary comments and discussions.
So we need a set of rules.
The rules:


   Information

1. No rants, no debates or discussions, no personal comments, no reactions to other posters, no MS bashing, period!

2. Maximum of 10 lines. So make sure your post is clear and to the point.
One or two words more won't matter, but don't push your luck.

3. Posting of screenshots is allowed to clarify your point.

4. No utopian requests, keep it reasonable.

5. Double posts and posts with features already requested by others will be deleted.

6. Adding a reason why you want it is allowed, but remember the 10 line rule.

7. If a user posts a problem that can be fixed, no help allowed other than saying poster should open a thread about his problem.


   Warning

Not complying with these simple rules, will get your post removed.


   Information

1. Please examine the list to see if your request is already there.

2. Please think about what you're requesting is a good thing for less knowledgeable users.
Example: Making editing the context menu easier, could lead to u... Read more

A:Requests to Microsoft.

A small (IMO not needed) but greatly requested feature reinstated. Put back the wireless icon activity in the tray of the Superbar

Read other 9 answers
RELEVANCY SCORE 36

The network that I am currently trying to patch up is peer to peer with about 20 machines (win 98 and nt workstation). The company is not willing to switch to a server based configuration at this point. However I am trying to do as much centralized administration as possible.
I want to be able to view the connections (net watcher) to any given computer on the network from one 98 machine. It was easy to set this up on all of the 98 machines, how can I view this information on the nt boxes from the 98 machine. When I try to access the nt machines with net watcher it tells me that the computer does not accept remote requests. If this is not possible can you tell me how to view this information on all of the nt boxes from one nt box.

Thanks,
Monty
 

Read other answers
RELEVANCY SCORE 36

I certainly appreciate your position. Indeed you are correct that I originally posted a request for assistance on another forum. After getting a reply from another user on that forum and nothing from the moderators for 2 days I decided to post on your site/forum...thinking that the user reply had suggested to the moderators on the other site that I was already receiving assistance.I have since received a request for my HJT log and info files from the other site so I will rely on them for assistance, My apologies for any confusion this may have caused. It was not my intent. More it was my misunderstanding of how these forums work.Thank you again and again, my apologies for duplicate postings. It was not my intent to over-tax either forum. I was simply getting impatient and after some reading thought erroneously that the user reply to my original post suggested to them that I was already receiving assistance when I was not.

A:Multiple Requests for help

This thread will now be closed since the issue seems to be resolved.If you need this topic reopened, please send a Private Message to any one of the moderating team member or myself. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Read other 1 answers
RELEVANCY SCORE 36

I suspect some kind of phishing bug but I am not sure what might cause this issue.
In the 17 years since I started using a computer I have gotten only a few requests to log into the server when I opened my email client. It has been more than a decade since I saw one.
In mid October this happened randomly and I ignored it. Instead I opened my properties folder and checked each tab and closed it. Then I was able to get my email.
After that I think the next day maybe a couple of days later it came back only this time it wouldn't let me get my email when I checked the properties. I ran an MSE scan and it seemed to fix the problem.
Then a week later the same thing happened. This time checking properties and doing an MSE scan had no effect. I was able to send a test email but I did not receive it. I ran an ESET online scan. This seemed to "fix" whatever was causing the log in request. Since about 28 Oct until today there was nothing then this morning it has come up again with a twist; When I check the properties folder my user name and password lines were blank!
I am running an MSE scan and ESET is on deck to run right after. I feel like I am getting a bug from somewhere that is raising a false need to log in so that my password can be gotten. IDK ?????
 

A:Suspicious log in requests

Read other 7 answers
RELEVANCY SCORE 36

Hello I am looking forward to an updated P72!! Some features I would like to see added vs P71: HDMI 2.0a support and DP 1.44k touchscreen option and a precision stylusTablet mode like the yoga hasHDR optionGsync external and LCD variable refreshUHD optical drive option10GB Ethernet or the interim 2.5/5Gb would be fineLatest WiFi standard .axtitanium to reduce the weightintel real3d camaracamera mechanical cover

A:P72 and features requests

Agree with all suggestions. Hoping for pen digitizer support mostly as I have the P51 version with digitizer presently.

Read other 8 answers
RELEVANCY SCORE 36

pl plllllllllllllllllll help
its urgent as my windows is showing stop screen error
i hav done antispyware scanning an then it asked for reboot i said yes an wen i started da windows its saying multiple irp requests
i cant even uninstall antispyware in safe mode as it is sayind windows installer is not proper pl reply soon..........

A:multiple irp requests

Hello and Welcome to TSF

You should have been patient and let the security team in the Hijackthis forum help you remove your infection, improper removal has caused your issue.

Use System Restore to a previous date to see if you can at least access windows in normal mode, then Look over the First Steps at Removing Malware and post the logs requested in the thread you started over in the Hijackthis forum.

Read other 1 answers
RELEVANCY SCORE 36

sorry, if this not the right place please move. I did many google searches cant seem to find the issue Im having, or maybe lack of the right key searches. You guys are my last hope.
I will try to explain my problem as clearly as I can. And so sorry about my bad grammar and spelling, trying to post this asap.

first off give small history of my PC. I bought my PC new Sept 2001. A HP Pavilion with 1.3 ghz, 256ram, and a 55gig hard-drive originally came with WinMe, since then I upgraded to XP. I kept my PC case clean, didn't try to install programs my PC couldn't handle, didn't go to any sites that knew were bad with viruses and such also had Malwareytes/spybot/avast/hijackthis to use, didnt install any toolbars, and tried not to have many programs open at the same time. I basically kept my PC simple with use.

Anyways around June I noticed some odd slowdowns
While playing Winamp and running a torrent with speeds of more than 400+ the audio would become choppy. This also happen when I would open FF, IE or any program while running Winamp, the audio would be choppy.

Extracting 700mb files from Winrar would take around 8mins

Playing Youtube, WMP, of VLC videos would be slow and choppy.

Transferring files from one PC to another over a crossover cable would take much longer. 4gigs of files would take about 20mins or so.

Virus scanners, Avast, Malwarebytes, and Spybot would also take much longer than usual.

So, about 2 weeks ago while my brother was on Youtube my... Read more

A:Solved: Computer slow file transfer, slow video play, slow youtube play

Read other 16 answers
RELEVANCY SCORE 35.6

I've never seen it run so slow before. It takes it's sweet ass time loading websites, loading programs, EVERYTHING! Can someone take a look at this log and tell me if I've missed something, and what I can do or try to do to fix this.Thank you in advance.Logfile of HijackThis v1.99.1Scan saved at 12:20:25 AM, on 7/6/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Analog Devices\SoundMAX\SMTray.exeC:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Picasa2\PicasaMediaDetector.exeC:\Program Files\Winamp\winampa.ex... Read more

A:Help! Slow Computer, Slow Internet. Slow, Slow, Slow!

Hi MaryJane,Sorry for the delay, this forum is really swamped right now. I don't see any positive signs of malware in your log, although there is one thing that I am unsure about. I'll get to that in a minute.Before we do rootkit scans and use some other tools to confirm that malware is not the problem, let's do a quick check of resources.Press <Ctrl>-<Alt>-<Del> to open Task Manager, then click on the Processes tab. Place a check next to Show processes from all users. Note the numbers at the bottom, CPU usage should be running at 0 to no more than five percent if your system is idle (no background tasks running). If that is not the case, scroll down and see if any of the processes is running at a high percentage of CPU usage. On a normal system at idle the System Idle Process should show about 98 percent, meaning nothing else is using the CPU. The next columns to the right, memory usage and peak memory usage, may also show something out of line if one process is using a large amount of memory. If you see anything showing high CPU usage or high Memory usage, make a note of it.Now, click the Performance tab. The key numbers here are in the Commit Charge box -- The Total and Peak figures; and in the Physical Memory box, the Total figure. Make a note of these three numbers. I would like to see them, but I can tell you what I'm looking for: basically, any time the Commit Charge exceeds the total physical memory, Windows will have to constantly swap d... Read more

Read other 17 answers
RELEVANCY SCORE 35.6

I don't know if I have a malware problem or not. I know enough to know that I don't know enough about hijackthis. So, if someone with the knowledge will take a look at the hijackthis file below and let me know what I should do, It will be much appreciated.

Thanks in advance,

karic123

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:16:39 PM, on 2/18/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ARIO&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ... Read more

Read other answers
RELEVANCY SCORE 35.6

This occurs at Arrisi.com. Arris is Motorola's cable modem sub-company, and is the official site for info on specific Motorola and Arris modems. Sometimes pages load fine, sometimes a page gives me the message " dotDefender Blocked Your Request" 
 
Reloading the page yields the same message, but navigating to the same page from a google search seems to work fine- i.e. page displays and no such message.
 
Also, sometimes pages at Tom's Hardware will give me a "Suspicious Activity Detected!" warning, and require me to enter a captcha in order to see a page.
 
I have Norton Security Suite, and scan fairly regularly with MBAM. I am certain my drives and OS are malware free. Is this anything to worry about?
 
 

A:Dot defender blocks my requests (sometimes)

Is this happening on a private computer or a business/corporate machine?FAQ: dotDefenderWhat is dotDefender?dotDefender is a web application firewall. It examines web based user interactions with your application(s) by performing deep inspection of HTTP traffic content in order to filter out harmful requests like SQL injection, cross-site scripting, etc. Running dotDefender locally on your web server complements our network based security measures such as your firewall and our intrusion protection system by filtering out attacks against your application itself.How will I know if dotDefender blocked my request?How do I report a dotDefender Block?How do I log into dotDefender Admin?When are dotDefender rules updated?dotDefender Blocked Your Request message - How to search an event by Reference IDdotDefender Blocked Your Request message - How to search an event by Reference IDKnowledgebase : dotDefender for IIS

Read other 5 answers
RELEVANCY SCORE 35.6

im having a problem with someone who is using a program named "netcut" that uses arp protocol to fool the gateway and other connected devices with a fake MAC addresses. this causes to disconnect the fooled devices from the network.

im thinking now of a solution for the problem. as far as i know that arp requests connot be blocked by firewall application. is there a way to block the arp and use only static arp entries instead of dynamic. i want a practical solution to this problem.
thank you
 

A:how to disable arp requests in my network ?

any ideas ?
 

Read other 2 answers
RELEVANCY SCORE 35.6

I've spent the last hour or so looking over several pages of these activation threads and haven't found one that addresses the problem I've recently had with my Win8 x64 activation. My copy of "8.0" Win8x64 has been activated since I bought it direct from Microsoft in January for $39.99 and burned the iso to DVD and installed it (This post does not concern "8.1" as I installed that on another partition entirely just to play with until it is ready for prime time.) I also got the free copy of Windows Media Center with its separate key. For the past six months I've had no problems at all relative to activation. I've actually never had any problems with activation (that I couldn't fix pretty quickly) ever since Microsoft initially started doing its activation bit with its OSes several years ago.

Yesterday, (I've listed my system specs) I'd been experimenting with using my UEFI bios to push the clock rates for my cpu with an attendant .15V rise in power to the cpu core--standard clock is 3.5GHz with Turbo to 4.1GHz--and I incrementally moved the cpu clock to 4.515GHz and turned off Turbo mode (of course), and found that my idle temps while running AMD's Cool 'n Quiet mode (through a UEFI setting) averaged 38C-45C; and ~55C under load (@4.515GHz), which is not much different at all from the standard stock-clocked temps. OK, that's as it should be for a well-binned, good-yielding chip, etc. It overclocks well with very little resistance... Read more

A:Mistaken OS requests for activation

Hi waltc,

Wow, you really know how to write a book with no stone left unturned! Anyway, since you have had 0 responses from the forum, I decided to just throw in my two cents. First off, my reactivations have been much more simple than yours; however, I can tell you that I have been successful every time. Some of these reactivations have included major components and the phone reactivation has always worked for me but the key to success in this area is, when they start to ask you questions, always respond with "one" as the answer. Now, since nobody knows for sure what information MS collects to identify an installation configuration, you can probably expect more of the same down the road but since Win 8 Pro is actually a retail license you should be able to get through a reactivation time and time again (if necessary). Remember, the answer is always "ONE." Cheers.

Read other 10 answers
RELEVANCY SCORE 35.6

My firewwall is getting strange outgoing requests for net access from a Temp folder. I have run scans and have cleaned out temporary files but somehow something keeps trying to send data out.Log followsLogfile of Trend Micro HijackThis v2.0.2Scan saved at 16:06, on 2008-10-19Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\nvraidservice.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Active SMART\ActiveSMART.exeC:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exeC:\Program Files\Windows Live\Messenger\MsnMsgr.ExeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Logitech\SetPoint\SetPoint.exeC:\Program Files\Log... Read more

A:Strange outgoing requests

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dllhttp://www.bleepingcomputer.com/startups/c....dll-21047.htmlhttp://www.sophos.com/security/analyses/vi...ojagentgjr.htmlSince malware can change quickly, if you still have issues, please describe the symptoms, include any error messages word for word and a fresh HJT log.Thanks

Read other 7 answers
RELEVANCY SCORE 35.6

I want to find out what URL/IP is being requested by some software. Do I need software to do this? Is there a log on my computer already? What can I do?
btw, sorry if my terminology is not correct, I don't really know what I am taking about hahaha
 

A:Log/Software of all internet requests?

Some third party firewalls can be configured to log every outgoing connection.

Parental Control software may also be able to log connections.

Most routers will have a log of some kind, but will only show which PC made the connection, not which application on a PC

You can use the netstat command in a Command Prompt as well:
Click Start | Run (or press WinKey+R), type cmd, press Enter.
Type netstat -b and press Enter.

This will show all current connections and the FQDN (Fully Qualified Domain Name) (if it can determine it), and the executable file that is associated with it.
(For Vista and later, you must also use the -F switch to get the FQDN and it must be run from an elevated prompt).

You can redirect the output to a file, and specify an interval and it will repeat every X seconds until you press CTRL+C
netstat -b 60>>"%Userprofile%\Desktop\ConnectionLog.txt"
 

Read other 1 answers
RELEVANCY SCORE 35.6

One of my user accounts is not receiving meeting requests in Outlook 2003. From the sender's computer they seem to be going through but the attendee never receives them?

Any suggestions on a resolution?
 

A:Outlook Meeting Requests

If they are using contacts have them refresh the e-mail address for this person.
 

Read other 2 answers
RELEVANCY SCORE 35.6

Hi I havent posted here in quite some time.. I have a question regarding my home network..
 According to Shields Up my computer is pretty much in Stealth Mode.. everything was good except it did respond to  ping requests.. should I disable this for added security,or does it really matter? I take great care to minimize the risk of malware and so forth and have good encryption on my network.. I really want to be as safe as humanly possible. Thanks in advance.

A:Should I Disable Ping Requests ?

Can you provide more details about your network setup?
 
Is it like the classic setup: computer - router/modem - Internet
Does your computer have a private IP address (like 192.168.*.*)?

Read other 3 answers
RELEVANCY SCORE 35.6

Whenever I plug a device into a USB port it says cannot proceed without formating the device, even though the device (photo card, flash drive, etc) always worked before. I don't dare format the device because I don't want to lose the information stored. I've tried everything I can find and still cannot solve the problem. Sure do need help.
Operating system is Windows 7, 64 bit pro. Exployer 9. Every thing else seems to be working OK except after updating my drivers the other day Exployer 9 seems to have problems downloading many graphic displays from websites. May be entirely different problem not connected to USB problem as that started more recently. USB is my main problem. I work from home so I'm usually around the computer much of the day or evening.

A:usb requests any and all devices be reformated

Hope that helps.

Read other 8 answers
RELEVANCY SCORE 35.6

Well i recently got several bluescreens with this error ("multiple irp complete requests"), so i googled it and a thread on techsupportforum said it would be connected to faulty drivers. im updating all device drivers trough device manager now, meanwhile i wanna upload my log file so you guys can check trough it and maybe tell me what exactly caused the error.

my system:
clevo p177sm; i7 4700mq, gtx 780; win 8.0

~St0rm

P.S:
log file from c:\windows\minidump:
012814-17906-01.zip
btw this is the thread im referring to:
[SOLVED] Multiple IRP Complete Requests
it is in the win xp section so i wanted to get sure im doing things right :)

A:multiple irp complete requests

Bump... someone actually care?

Read other 2 answers
RELEVANCY SCORE 35.6

I have been getting BSOD on start-up with the above message.
Bc Code 44
BCP1 88624008
BCP2 00000EAE
BCP3 00000000
BCP4 00000000
OS Version 6_1_7600
Service pack 0_0
Product 768_1
Any help welcome.

A:Multiple IRQ complete requests

Hello,

Please see: http://www.techsupportforum.com/foru...ta-452654.html

Read other 1 answers
RELEVANCY SCORE 35.6

I am using below code to validate the text in the textboxes. And when i enter the text in that textbox, immediately web service calls and returns the response and based on the response the cursor will move to respected Amount text box. Here , i am getting the
alerts in Google chrome, regarding that entered account is invalid or inActive,,etc but the same code is not working in IE. 

And i need one more help i.e, We've totally 7 textboxes, if the user is entering the text in the 7th textbox if the above textboxes are empty ,, we need to display the alert message like ,, please enter the text in the 1st or 2nd, 3rd,..etc empty text box.

I've written the code for the same as well but it's displaying the alerts twice even the above textbox has the values..



 function AccountData(txtseq) {

        var acc;

        var accountno = "";
        var textbox = "";

        if (txtseq == "Acc1") {
            accountno = document.getElementById('<%=Acct_Number1.ClientID%>').value;
            CheckForValidAccountNo(accountno, document.getElementById('<%=Acct_Number1.ClientID%>'));
        }

        if (txtseq == "Acc2") {
            accountno = document.getElementById('<%=Acct_Number2.Cl... Read more

Read other answers
RELEVANCY SCORE 35.6

Using Outlook Web Access to access an Exchange 2003 server: the server does not have a security certificate, so when IE first touches the site, it issues a security warning. I click through that and log in. Nothing new there. However, I am now having a problem reading messages. Every time I open one, I get ANOTHER security warning that I have to click through. That is new in the last month or so. I launched a Virtual Machine of XP that is not current with its Windows Updates. It works as expected.

Does anyone know which recent update from MS might be causing this problem. It is really annoying.
 

Read other answers
RELEVANCY SCORE 35.6

I have a small network (12 users) running SBS 4.5. Clients are Win2K Pro and Office2K Pro. When a users creates a new meeting request and invites some (but not all) users, the meeting request is received by ALL users.

I suspect that it is something to do with delegation, but am unsure where to start looking.

Any guidance would be welcome. Thanks
 

A:Meeting Requests going to all users

I found this under the help in Outlook 2002

Troubleshoot Delegate Access
This feature requires Microsoft Exchange.
Viewing another person's folders
I can't see an appointment in another person's Calendar when I'm the delegate.

When you view days in the Calendar folder, you can't see the details of an appointment, but the free/busy time shows that the time is busy. This is because, even though you have delegate access permission to the other person's Calendar folder, if the other person created an appointment and marked it private, you cannot view the appointment unless they have given you permission to do so. Have the person who granted you permission clear the Private check box on the Appointment tab in the appointment, or have the person modify your permissions so that the Delegate can see my private items check box is selected.

I receive meeting requests and responses that my delegate should get.

The person you set up as your delegate might have been deleted from the Microsoft Exchange Global Address List, or there might have been an internal rule-handling failure on the server. To reset your delegate's permissions, click the Tools menu, click Options, and then click the Delegates tab.

The Send meeting requests and responses only to my delegates, not to me check box might not be selected. On the Tools menu, click Options, and then click the Delegates tab.

I'm a delegate, but I can't open the other person's folders... Read more

Read other 1 answers