Over 1 million tech questions and answers.

Slow computer-advertising pop-up and redirects

Q: Slow computer-advertising pop-up and redirects

Hi,

I believe I am infected. My computer is running much slower than normal, locks up after extended use or multitasking, and I get popup advertising on some websites that don't have popups. When used for extended periods, the computer simply locks up and I am forced to reboot. I want to back up my entire computer, but don't want to have an infected backup. Please help.

Thanks
Roofdenton

RELEVANCY SCORE 200
Preferred Solution: Slow computer-advertising pop-up and redirects

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Slow computer-advertising pop-up and redirects

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txtOr at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt=============================================================================Download aswMBR to your desktop.Double click the aswMBR.exe to run it.If you see this question: Would you like to download latest Avast! virus definitions?" say "Yes".Click the "Scan" button to start scan.On completion of the scan click "Save log", save it to your desktop and post in your next reply.NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.

Read other 1 answers
RELEVANCY SCORE 59.2

Greetings,My fiance clicked a link in a facebook message yesterday that has caused me a large headache. When searching in google I will be redirected to advertising sites when clicking on a link to view a page. They are random and are generally to do with what the search was about. I have run SpyBot, MalwareBytes, Hitman Pro and Windows Defendor. When each were run, they each found threats and were successfully removed, only to come back a few hours later. My computer crashed with a blue screen when attempting to run GMER with an error message of PFN_List_Corrupt. Upon reboot, Windows is now telling me my version of Windows is not genuine, when in fact it is.Any help you can provide will be greatly appreciated.DDS (Ver_10-03-17.01) - NTFSx86 Run by Home at 19:09:01.17 on Tue 06/15/2010Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.943 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\Common Files\Java\Java... Read more

A:Google Redirects to advertising sites

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Gmer is the best but can be hard to get a log lets try this and see what we get.Scan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Sa... Read more

Read other 3 answers
RELEVANCY SCORE 59.2

Hi, thanks for reading!

I picked-up some sort of virus that causes pop-up advertising in the left and right corners of the browser. I am using IE8 and have Pop-ups blocked.

I ran Housecall to try to get rid of it to no avail. I am using Windows 7 Enterprise edition.

I can follow directions well and look forward to getting some help with this issue that has been plaguing me for a couple of months.

Kind regards,
Michael

A:Help please. Virus causes pop-up advertising in IE 8 and occasional redirects

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

Read other 16 answers
RELEVANCY SCORE 58.4

Hello, I am relatively new to bleepingcomputer, and unfortunately it is because of a virus I appear to have. Whenever I visit google or yahoo related sites, I get redirected to advertising sites with strange names on occasion. I don't take my time in promptly closing these windows, as many of these ads are likely ridden with more viruses. I have done a quick scan with malwarebytes, and it picked up one infected object. I did a full scan after that, to ensure that there were no othere bad things. It took over 6 hours, but it picked up nothing else. I deleted the infected object from quarantine and rebooted, but I still recieve redirects away from google. I am very fearful that this issue will only get worse, as viruses normally do. If it really matters, I could post the logs from malwarebytes, but for now I'll just attach the DDS and GMER logs as instructed by the tutorial in one of the forums.
For the DDS log: What exactly is a script blocking program? I assumed it was part of my antivirus, to prevent malicious conduct on the machine, but I found nothing in my Kaspersky settings. I ran the DDS file without changing anything in par
ticular to prevent script blocking, will the log be made properly? Also, for GMER, every checkbox above "Services" was greyed out and inaccessable to check or uncheck. I only checked the C drive box, but everything else but Services, Registry, Files, and ADS was unchecked. I'm unsure how that will impact the logs, but I don&... Read more

A:Redirects from search engines to advertising sites

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

Read other 16 answers
RELEVANCY SCORE 58.4

When I came here a few months back to sort out my "CTRL+ALT+DEL not working" problem, I came across a program that sounded like a good idea. I'm not a techie, but it did something like redirecting various people (such as tradedoubler) to 127.0.0.0. This meant that lots of banner adverts don't appear in your browser, because the link can't be made to their servers

Now I am in the situation that I am trying to earn lots of cashback through Quidco, but whenever I try to click through on Quidco I receive an error message along the lines of "Unable to connect - Firefox can't establish a connection to the server at clkuk.tradedoubler.com."

I am assuming that the program that I found here that blocks banner adverts is the cause, so I have looked in Add/Remove Programs in the Control Panel but can't see anything listed that sounds relevant. Can someone please tell me how to sort this problem out?

Thanks
 

A:Program that redirects, so that advertising banners don't show up

use the following programs for tools:
crap cleaner
spybot search and destroy
ad-aware
and your anti-virus
 

Read other 11 answers
RELEVANCY SCORE 56.8

Hello,
My laptop (running Windows 7 Home Premium) randomly plays what sounds like radio adverts and music. Also, google searches are occasionally redirected to spam websites. I suspect it is a malware infection and it started a few days ago. I have seen other people have posted similar problems that were solved; however, I would not be confident trying to remove the malware myself without expert guidance along the way! Any help would be appreciated. Below are the logs:

HJT log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:40:32 PM, on 18/05/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16483)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
C:\Program Files (x86)\Samsung\Kies\Kies.exe
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Pro... Read more

A:Suspected Malware - Radio plays randomly and google redirects to advertising

Read other 16 answers
RELEVANCY SCORE 52

Hey guys, Malwarebytes is being an bleep and i've tried reinstalling it many times. So Im just using HiJackThis.Here is my log - my computer is effing slow, there is around 6-7 svchosts running and i constantly get redirects in my browsers and popups.Need your help pretty please.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:03:21 PM, on 15/04/2009Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16809)Boot mode: NormalRunning processes:C:\Windows\Explorer.EXEC:\Windows\WindowsMobile\wmdcBase.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Windows\System32\mobsync.exeC:\Program Files\Windows Media Player\wmplayer.exeC:\Windows\system32\taskeng.exeC:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exeC:\Windows\system32\wuauclt.exec:\Users\Joel\Documents\lol\Programs\HiJackThis.exeC:\Program Files\Mozilla Firefox\firefox.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_... Read more

A:Redirects, Pop-Ups and Slow computer

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..Please download ComboFix by sUBs from HERE or HERE or HERE and save it to your Desktop.During the download, rename Combofix to Combo-Fix as follows:It is important you rename Combofix during the download, but not after.**NOTE: If you are using Firefox, make sure that your download settings are as follows:Tools->Options->Main tabSet to "Always ask me where to Save the files".After that, double-click and run Combo-Fix. Let it finish its job and post the log hereIf ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..

Read other 2 answers
RELEVANCY SCORE 51.6

I have logs from DDS, FRST64, Hijack, Junkremoval,& Eset Online for a computer that is getting slower each day.  Eset scanner returned no viruses, also Super-Antivirus, but both scans showed a lot of junk in relation to internet.

A:Slow computer - Need help with logs - Redirects

Greetings Robyn and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.When you post your reply, use the button instead.In t... Read more

Read other 61 answers
RELEVANCY SCORE 51.6

Fixing computer for computer illiterate family member who claims that since trying to download some sketchy MP3, computer has been running incredibly slow with page redirects to advertisement sites. 
 
I've run malwarebytes and microsoft security essentials but it doesn't look like that has solved the problems
 
running 64bit windows 7, mostly google chrome usage
 
Thanks!
 
 

A:slow computer page redirects

Hi kaeso!
Did Malwarebytes find anything? If so:
Open MalwareBytes Anti-Malware and then click on History
On the left column, select Application Logs. Select the most recent log among the list, it is usually the one on the top (or sort by date) and open it.
Go to the bottom left corner to Export and select Text File (*.txt)
Save it to the desktop, preferably named ‘mbamlog’ or etc and paste it here.
 
Please download MiniToolBox HERE to your desktop to run it.
Checkmark the following boxes:
* List content of Hosts
* Flush DNS
* Report IE Proxy Settings
* Reset IE Proxy Settings
* Report FF Proxy Settings
* Reset FF Proxy Settings
* List last 10 Event Viewer log
* List Installed Programs
* List Devices (do NOT change any settings here)
* List Users, Partitions and Memory size
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
Click Go and Copy / Paste the result. (result.txt)
 
Thank you!
 

Read other 11 answers
RELEVANCY SCORE 51.6

Have been directed here from my previous thread http://www.bleepingcomputer.com/forums/ind...p;#entry1607671 i've got a virus in my pc web browser, when i run google or mozilla and do a search it takes me to different advertising sites.I also get a anti virus scan pop up from nowhere from time to time saying that my pc is infected.i've ran malewarebytes and spybot along with my avg anti virus but cant seem to get rid of this.Followed the various directions from garmanma but to no availalso noticed that my pc seems to be getting much slower so am hopeful someone here can help me outdss log:DDS (Ver_09-12-01.01) - NTFSx86 Run by pj & clever at 17:44:25.40 on 06/02/2010Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_18Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3070.1851 [GMT 0:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows... Read more

A:Browser redirects and computer slow

update:just dawned on me that i didn't copy and paste the whole of the dss file so here it is in full !!dss log:DDS (Ver_09-12-01.01) - NTFSx86 Run by pj & clever at 17:44:25.40 on 06/02/2010Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_18Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3070.1851 [GMT 0:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\system... Read more

Read other 24 answers
RELEVANCY SCORE 51.6

I have run several tools including MBAM, superantispyware, smithfraudfix and eset online scan with no success. Had a previous infection with antivirus 2010 and porn pop ups. they seem to be gone...I can log on to one account and comp seems to work ok. The main account we normally use is the one that has the browser redirects and slow response time. also home page has been changed and most searches turn up undesired results...Computer crashed while running GMER. I ran GMER in safe mode but computer locked up when I tried to save the report.so I ran it with sections checked only and it worked.I have completed prep guide and attached logs:DDS (Ver_09-06-26.01) - NTFSx86 Run by tim at 10:23:35.92 on Mon 05/10/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.119 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\svchost.exe -k imgsvcC:\Program Files\Cano... Read more

A:Browser Redirects; slow computer

Good evening. I see neither an anti-virus program nor a firewall installed - how long has this been the case?

Read other 32 answers
RELEVANCY SCORE 51.6

Hi folks. I need help asap. My computer is running very sluggish and when i look for google search results the IE redirects me to antivirus searches. I have a report to do on my house comp (im typing on my laptop) and if i dont get it done by tomorrow, i get an F so please help me quickly!!! I have a hijack this log here. Any help would be greatly appreciated thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:58:21 PM, on 12/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\DISC\DISCover.exe
C:\Program Files\DISC\DiscUpdMgr.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322... Read more

A:HELP ASAP: Computer redirects on IE and is slow.

I recommend that you post in the Virus/Trojan/Spyware section of the forum.

Start with the following thread.

http://www.techsupportforum.com/f50/...lp-305963.html

Read other 1 answers
RELEVANCY SCORE 51.6

The computer is Win7 (64) with IE10. Computer runs slow and the browser redirects. Also the computer security settings will not remain at the settings, I enable the download option under custom security settings and this keeps changing back to disable. Also, I constantly get a windows pop up asking if I want to remain on page or change page. This seems to come and go randomly.
 
I am using MSE and Malwarebytes (free version).

A:Computer slow and browser redirects

Hi and Welcome!!   
 
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
 
Having said that....     Let's get going!!  
----------
 
Please download DDS from either of these links
 LINK 1LINK 2
 
and save it to your desktop.
Disable any antivirus programs during the scan (If you have ... Read more

Read other 63 answers
RELEVANCY SCORE 51.6

here is my hijack logLogfile of Trend Micro HijackThis v2.0.4Scan saved at 3:42:56 PM, on 6/19/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Dell\QuickSet\NICCONFIGSVC.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\UltraVNC\WinVNC.exeC:\Program Files\RealVNC\VNC4\WinVNC4.exeC:\Program Files\UltraVNC\WinVNC.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\WLTRAY.exeC:\Program Files\Intel\Wireless\Bin\ifrmewrk.exeC:\Program Files\Synaptics\SynTP\SynTP... Read more

A:slow computer and ie page redirects

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 51.6

my computer has recently been very slow and google is redirecting me to random pages that do not relate to the search links i click on.

Any help would be appreciated.

A:Google redirects and slow computer

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 51.6

Whenever I open a web browser, a mysearchdial page is opening up instead of my home page. I've also been noticing slower and slower loading times as of late. I try to run Malware Bytes, but it always crashes on me before it can remove anything. I'm pretty confident that my computer is infected with something, but I have no idea how to go about solving it.
 
Thanks in advance, Matt.

A:Slow computer, browser redirects

Maybe you'll get lucky with the:https://www.google.com/search?&q=conduit+removal+tool..and/or the Lavasoft Registry Tuner (trial)http://www.lavasoft.com/products/lavasoft_registry_tuner.php

Read other 2 answers
RELEVANCY SCORE 51.6

This is a coworkers computer that is having issues. Its running Windows XP. It runs really slow and IE popups occur frequently. Often times when you go to one site, IE will direct you to a totally different site. Every time IE is opened we get a popup that ask if we want to open the previous browser or open our homepage, like we closed IE suddenly. I have ran Malwarebytes, Super AntiSpyware, SpyBot, AVG, and ad-aware on this PC with no changes. I have downloaded Rkill and when we run it a file in the Application Data folder shows up many times (as many as 82 times once). This file changes its name every time we delete it. the last time it appeared it was xL3F5aC2.exe, I googled it and found it in a post on this site included in a HiJackThis file. My boss thought we needed a paid software so he downloaded CyberDefender. I think it was a rogue program but he is the boss. I have downloaded HiJackThis and I do have the log file when it would be requested. I am at wits end, I do not know what else to do. We would just restore this computer but we have some programming that an outside source has downloaded on it so we can perform certain task relevant to our line of work. To have this reinstalled and set up would be a major investment, a larger cost than just to replace the computer. I will be honest with you, I know my way around a computer, but I am not an expert. If you choose to help me, I would be thankful if you give me step by step directions, please don't just assume I ... Read more

A:IE popups and redirects, slow computer.

Anything would be helpful. Just wondering why I never got a reply for this issue? I understand I am new on this forum, and I want to make sure I didn't cross a line or break any rules. Thanks,Thom

Read other 11 answers
RELEVANCY SCORE 51.6

Im following the help for infection directions heres my logs :>

DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 22:10:26.40 on Wed 09/02/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1022.748 [GMT -7:00]

AV: Webroot Internet Security Essentials *On-access scanning disabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597}

============== Running Processes ===============

C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\2RORK32J\dds[1].scr

============== Pseudo HJT Report ===============

TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolb... Read more

A:computer slow & redirects browser help

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I'll ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download ComboFix from one of these locations:Link 1Link 2Link 3Important!You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Make sure that you save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow ... Read more

Read other 5 answers
RELEVANCY SCORE 51.6

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17239  BrowserJavaVersion: 10.67.2
Run by jol at 11:32:07 on 2014-08-16
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.358.1033.18.8157.6519 [GMT 3:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Online Armor Firewall *Enabled* {BD3F5FCA-866B-1E2E-0A68-58900A751EA1}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\Online Armor\OAcat.exe
C:\Program Files (x86)\Online Armor\oasrv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\windows\system32\nvvsvc.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\taskhost.exe
C:\Program Files\Rea... Read more

A:Slow computer and random redirects

Please run the following:Please download the appropriate version of Farbar Recovery Scan Tool (FRST.exe) from here:http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ (for 32bit systems)http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ (for 64bit systems)save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.NEXTPlease download aswMBR.exe and save it to your desktop.Double click aswMBR.exe to start the tool.When asked if you want to download Avast's virus definitions please select Yes.Click ScanUpon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet. You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

Read other 4 answers
RELEVANCY SCORE 51.6

A friend of mine said that this was the place to come for help on cleaning malware and spyware out of my system. This is computer is used by both my wife and I for very general things i.e. checking email, facebook, banking, other surfing of the internet. Recenlty my wife said that she thought the computer was running slower than normal and I agreeded. We use microsoft security essentials to scan our computer and I think it has done a good job but it seems as though something has slipped by its scanning. I have posted the requested logs below. Any help would be really appreciated. Thanks.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.6001.19170
Run by Owner at 13:51:30 on 2011-12-20
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3963.1912 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\... Read more

A:Computer running slow/ redirects etc.

Hello, and welcome to TSF.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 15 answers
RELEVANCY SCORE 51.6

My computer has started slowing down over the past few weeks and my email has been compromised, which I have already fixed and changed my password.  Wondering if someone could take a look and make sure my computer isn't infected with something hiding.  Here are the following logs.

A:Slow computer at startup and redirects

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first t... Read more

Read other 5 answers
RELEVANCY SCORE 51.6

Everything is running a lot more slowly and google as well as other search engines redirect my links please help!

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\KADxMain.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\InstallShield\Update... Read more

A:Google redirects and computer is slow HJT log

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Read other 2 answers
RELEVANCY SCORE 51.6

Hello computer geniuses! My computer has been infested with viruses and I just can't seem to get rid of them. Currently only Spybot seems to be able to detect anything. However even after it takes care of what it finds, more keep coming. The first symptom was just browser redirects from search engines and the occasional pop-up. Since then it has for the most part crippled my computer. I can't really open any programs. "System" is using 100% of the cpu and an error message for Svchost is coming up stating "the memory could not be read". I have no idea what to do anymore. I need help! I am posting the DDS scan as requested. I tried running GMER twice but towards the end of the scan the computer crashes. However, I was able to get a hijack this log which i am going to post as an attachment. Thanks in advance! DDS (Ver_10-03-17.01) - NTFSx86 Run by HP_Owner at 23:51:05.04 on Fri 07/02/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.186 [GMT -6:00]AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}AV: Panda Cloud Antivirus *On-access scanning enabled* (Updated) {5AD27692-540A-464E-B625-78275FA38393}AV: Sunbelt VIPRE *On-access scanning disabled* (Outdated) {964FCE60-0B18-4D30-ADD6-EB178909041C}FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}============== Running Processes ===============C:\WINDOWS&... Read more

A:Browser redirects and a very slow computer

Hello dh8841, Welcome to Bleeping Computer. My name is fireman4it and I will be helping you with your Malware problem.Please take note of some guidelines for this fix: Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". Finally, please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.1.We need to disable Spybot S&D's "TeaTimer"TeaTimer works by preventing ANY changes to the system. It will attempt to undo any fixes we run, because it blocks these fixes from running.In order to safeguard your system from problems that can be brought on by a half finished fix, we need to disable TeaTimer. We can reenable it when we're done if you like.Open SpyBot Search and Destroy by going to Start -> All Programs -> Spybot Search and Destroy -> Spybot Search and Destroy.If prompted with a legal dialog, accept the warning.Click and then on "Advanced Mode"You may be presented with a warning dialog. If so, press Click on Click o... Read more

Read other 10 answers
RELEVANCY SCORE 51.6

When I type in a web page or click one from the google search it redirects me to a scree that replicated the my computer screen and shows a scan in progress and a pop up comes up that says my computer is infected.....you close that one and another pops up that asks do i want to install antivirus now? I have to ctrl-alt-del to quit task because the pop ups loop. Thanks for any help. I am trying to open HJT now but it wont open???? I will post an update'
 

A:Computer redirects sporatically and is slow????

Read other 16 answers
RELEVANCY SCORE 50.8

Hi!
I had a dell netbook and caught a virus, or probably more than one a while ago. I have stopped using my computer because it's very slow has pop ups all the time and won't shut down unless I force it to.
I caught a virus on a tv show webpage. A fake antivirus page showed and I could close it unless I clicked on it, since then it's been really bad.

In the first minutes I can use my computer but after a little bit of time, it gets really slow I can't use more than one application. There is a sound that keeps coming, like an error sound when you close a document that you didn't save. I have installed Avira and it keeps telling me it's infected and I stop the viruses from coming all the time.

When I open a webpage the home page changes and brings me to a ''win an ipad contest'' or other webpages of that type.

I don't know if I should reboot my computer, and I don't know how to do it either. I have a backup of all that's on my computer so I don't mind. I just want to make sure I still have all the original programs afterwards. I have all the installations CDs that came with the computer, but since it's a netbook, I can't use CD on my computer.

Thank you very much for all your help with saving my computer!

Laurence

A:Many virus, Google redirects, slow computer

Welcome aboard Restart computer in safe mode and let me know if you can operate it better.We'll go from there.

Read other 20 answers
RELEVANCY SCORE 50.8

Compter is running like its on 56k on a 15mbps conection,its also geting some redirects on pages
its running windows vista
i have recovered the computer back to factory but did not help

A:computer running slow some page redirects

Hello there    
 
Welcome to Bleeping Computer, I'm LighthouseParty. Let's run a couple of scans to see what could be causing this.
 Step One:Download and run Mini Tool Box
Click here to download MiniToolBox to your desktop.
Double click MiniToolBox.
Select the following and then press go.
Post the log in your next reply.
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Installed Programs
List Restore Points
 Step Two:Install and run Malwarebytes Anti-Malware
Click here to download Malwarebytes to your desktop.
Double click mbam-setup-x.x.x.xxxx and follow the on-screen instructions.
On the dashboard, click update now.
After that, click scan now - the scan will now begin.
When the scan's completed, select apply actions - make sure the action is quarantine.
Restart your computer.
How to get the log.
On the dashboard, select the history tab and click application logs.
Select the log which has the time and date of when you did the scan.
Click copy to clipboard and paste it into your reply.
Step Three:Download and run Security Check
Click here to download Security Check to your desktop.
Double click SecurityCheck and follow the on-screen instructions.
A log should open, called checkup.txt.
Please post the contents of it in your next reply.
Thanks and good luck!

Read other 5 answers
RELEVANCY SCORE 50.8

About a couple of weeks ago I discovered that my Google search results were redirecting me to random webpages, and that my computer was running much slower than normal.

I have downloaded multiple programs to help fix this problem based on forums from this site and others.

On the first scan from each program (all of which were fully updated), most all of them detected something, and so I deleted anything they found. So the problem was fixed for awhile, but then it kept coming back, over and over again, and when I tried running the programs again, they found nothing.

Programs that I have run are:
TDSSKiller
OTM
ComboFix
Gooredfix
Spybot
Microsoft Security Essentials
Malwarebytes

Even though the problem was fixed by these programs, the search redirects were back the next day.

I've also run the ipconfig /displaydns in command and have seen sites that I have not recognized at all. I have flushed the DNS multiple times but the problem still persists.

As I said my computer has also been running a lot more slowly than normal (it's usually super fast). The other day I went to watch a movie on the internet (from a trusted site) and the graphics kept freezing and skipping, which it never does unless I have tons of programs running at once.

I am very desperate for help, and I cannot afford to take my computer in for re-formatting because I have spend years on it.

I am also pretty familiar with Windows components such as command, regedit, services, system ... Read more

A:Computer Slow with Google Search Redirects. PLEASE HELP!!!

Hello and welcome to TSF

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 50.8

I'm working on my girlfriend's computer. I've done the little I could do; realized I was in over my head, and stopped immediately and came back here.  She bought a computer from Aaron's a couple of years ago. It's paid off, and is an ok computer so far.  She hasn't had the safest of browsing habits and went without protection for awhile. 
 
The issues.  First, she occasionally gets browser redirects.  Second, she gets video and audio popups from time to time. Third, the browser slows way down. I opened task manager and realized that iexplorer.exe was popping up all ove the place, looking like its eating up her CPU.  I've run malwarebytes, and the firewall is (now) on.  Thanks in advance for everyone's help!
 
Also, right now I'm attempting to click on the dds log to copy/paste here.  It's not responding, not even a not responding error message.  I can't seem to click it from the desktop. I was able to run a search for it and get it instantly; as soon as I did the copy from the desktop opened, as well.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16635  BrowserJavaVersion: 10.25.2
Run by aaron at 9:35:27 on 2013-07-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3701.2222 [GMT -4:00]
.
AV: Computer Security *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
SP: Computer Security *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Def... Read more

A:Redirects...iexplorer opening over and over; computer very slow.

Hi,

Please run the following:

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.NEXT
Please download Malwarebytes Anti-Rootkit from here Malwarebytes : Malwarebytes Anti-Rootkit and save it to your desktop.

Be sure to print out and follow the instructions provided on that same page.

Caution: This is a beta version so please be sure to read the disclaimer and back up any important data before using.Double click the mbar.zip file to open it, then 'Extract all files'.Double click the mbar folder to open it, then double click mbar.exe to start the tool.Check for Updates, then Scan your system for malwareIf malware is found, do NOT press the Cleanup button yet, click EXIT as I'd like to see the log first so I can see what it sees.You'll find the log in that mbar folder as [b]MBAR-log-<date and time>***.txt]/b]

Please attach that to your next reply.

Read other 15 answers
RELEVANCY SCORE 50.8

Have been helped by Narenxp here, who suggested I post here.http://www.bleepingcomputer.com/forums/topic465984.html/page__p__2813447#entry2813447Am running 64bit so no GMER log.DDS Log.DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31Run by Toby at 16:10:17 on 2012-08-21Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4013.1998 [GMT 1:00].AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-

F85A-FBCD-ADB11639C5F0}AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-

6091-10E4E1F341F6}SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4

-C17D-96C36DBE8F4D}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-

DA132C1ACF46}SP: PC Tools Spyware Doctor *Disabled/Outdated* {94076BB2-F3DA-227F-9A1E-

F060FF73600F}SP: STOPzilla Anti-Spyware *Disabled/Updated* {B2E69928-50DC-94CA-6A80-

AAB054008761}SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-

5A21-2B969A740B4B}.============== Running Processes ===============.C:\PROGRA~2\AVG\AVG2012\avgrsa.exeC:\Program Files (x86)\AVG\AVG2012\avgcsrva.exeC:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Program Files (x86)�... Read more

A:iexplore.exe processes, slow computer, redirects

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

Read other 3 answers
RELEVANCY SCORE 50.8

About a week ago our home computer got infected with the Windows XP 2012 Security virus. I used he guide I found on here and successfully removed it. Within the last couple days my computer has been acting up again though. After the fake security virus I could not get Windows Autmoatic Updates to turn back on, and a svchost.exe would run and take up all the CPU and im pretty sure that was related to the Automatic Updates problem. Yesterday I downloaded a program called Dial-a-Fix and it managed to turn the updates back on and it seemed to have fixed the Automatic Updates problem. Now I havea google redirect problem and sometimes when I open IE8 a popup will just appear. I have used Malwarebytes and removed some trojan that shows up when it scans, but it keeps coming back. I have the free version of Avira on the computer and it always tells me it has detected Malware but when I tell it to remove it, not much happens. It scans then nothing really happens. The operating system is XP. Thanks for any help.

A:Slow Computer with Google Redirects and Popups

Please post the complete results of your last MBAM scan for review (even if nothing was found).To retrieve the Malwarebytes Anti-Malware scan log information, launch MBAM.Click the Logs Tab at the top.The log will be named by the date of scan in the following format: mbam-log-date(time).txt
-- If you have previously used MBAM, there may be several logs showing in the list.Click on the log name to highlight it.Go to the bottom and click on Open.The log should automatically open in notepad as a text file.Go to Edit and choose Select all.Go back to Edit and choose Copy or right-click on the highlighted text and choose Copy from there.Come back to this thread, click Add Reply, then right-click and choose Paste.Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Logs are saved to the following locations:-- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd-- Vista, Windows 7, 2008: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-ddPlease download Kaspersky's TDSSKiller and save it to your Desktop. <-Important!!!Be sure to print out and follow the instructions for performing a scan. Alternate instructions can be found here.Extract (unzip) the file to your desktop and make sure TDSSKiller.exe (the contents of the zipped fi... Read more

Read other 9 answers
RELEVANCY SCORE 50.8

Hey guys,

i have some type of virus on my computer. When ever i try to do any google searchess my websites get redirected to bogus sites. Examples: hxxp://is2002.com/search.php hxxp://pen.pal.com/search.php. My computer also has been taking a very long time to start up.

I tried running malware bytes, spyware doctor, trojan guarder and avg 9.0 but its still infected!

Please help me if you can
Thank you!

here is my HJL

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:54:35, on 12/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AV... Read more

Read other answers
RELEVANCY SCORE 50.8

I was here a few months ago and now I got another virus. google links redirect me to spam websites, my fan is loud and constant and my computer is slow to complete certain task...


last time I had an antivirus pro infection and had no problem doing the dds thing and running a gmer rootkit scan, but this time I cant complete a full gmer scan without the computer resetting. Is there a way around this? I downloaded it from both links, closed all programs and uninstalled what I had to, but it still resetted mid scan... Im including the dds thing but cant upload the gmer scan and attachment and need instructions on what to do instead




DDS (Ver_09-12-01.01) - NTFSx86
Run by HP_Administrator at 15:32:28.34 on Sun 12/20/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.637 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files... Read more

A:google redirects, loud fan, slow computer

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

I need to see a gmer log in order to help you.

Delete your existing copy of gmer. Please run this special version of gmer:

Download GMER Rootkit Scanner from here and Save it to your Desktop. Double-click gmer.exe to run it. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Uncheck the following ...Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it to your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any... Read more

Read other 12 answers
RELEVANCY SCORE 50.8

Hi all. I'm new to this and I seriously need help! I have an HP with McAfee. McAfee keeps popping up saying it has bloked a trojan called "fake alert". When I scan using McAfee it says that my computer is clean, however I am having a ton of issues. My computer keeps freezing and throwing me out of the internet. Also when I use google, it redirects me to a completely unrelated site. Any suggestions? I am lost....
 

A:Slow computer and search redirects. *hijackthis log*

Read other 16 answers
RELEVANCY SCORE 50.8

Hi - Have a Win XP SP3 that was infected with Internet Security 2010 - have removed it twice but still having issues such as google seraches being redirected to random sites and cannot boot up in Safe Mode but boots normally with no problem. Have run Malwarebytes, Adaware, Spybot, AVG, CCleaner and Tweaknow but cannot clean off whatever is left. Attached below is the Hijack this log file. Any help would be appreciated!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:38:54 PM, on 12/23/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Java\jre6�... Read more

A:google redirects and generally slow computer

Please visit the following link and use the instructions there to post a ComboFix log as a reply to this topic:http://www.bleepingcomputer.com/combofix/how-to-use-combofixAfter running ComboFix, please post the ComboFix log as a reply to this

Read other 23 answers
RELEVANCY SCORE 50.8

Ok, I hate having to ask for help by bothering people but I'm in a bind. Google redirects me to spam links when I click them the first time but the second time, it's fine. When I click 'back' when I'm on this spam website it sends me two pages back. Also, my computer has been running slower and slower. Sometimes just the internet would be slow on my computer but not the computer itself, the 360 in the living room, nor my roommate's computer/internet. The router is in the next room. I ran this 'ComboFix' and it pulled this up...

ComboFix 11-01-20.03 - Daniel 01/21/2011 5:04.1.1 - x86
Microsoft? Windows Vista? Home Basic 6.0.6001.1.1252.1.1033.18.2939.1693 [GMT -6:00]
Running from: c:\users\Daniel\Desktop\Combo-Fix.exe
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\0mBYlb53.jpg
c:\users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\3xykyN.jpg
c:\users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\8jB0Yy.jpg
c:\users\Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\aMPy7.jpg
c:\users\Daniel\AppData\Local\Microsoft\Windows\... Read more

A:Google redirects and computer running slow

Hello and welcome to Tech Support Forum.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:


Step # 1 Download and run DDS

Download DDS and save it to your desktop from here or here or here
Disable any script blocker, and then double click dds.scr to run the tool.When done, DDS will open two (2) logs: DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.


Step # 2: Download and Run Gmer

Please download gmer.zip from Gmer and save it to your desktop.

***Please close any open programs ***

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security Analyst

If possible rootkit activity is found... Read more

Read other 4 answers
RELEVANCY SCORE 50.8

Hello, I've had to work with virus problems in the past, but I'm relatively unfamiliar as to what to do should my virus scanner fail to detect the problem. Currently I'm using Malwarebytes and McAfee. I've been seeing signs of a virus, including constant redirects in search engines and my computer slowed down almost to a halt, but I haven't been able to find the file(s). Recently, McAfee found "aviwsGlade.dll" and I removed it, but that doesn't seem to be enough. What steps should I take to find and remove whatever is affecting my computer?





DDS (Ver_09-12-01.01) - NTFSx86
Run by Brendan at 15:43:00.57 on Sun 02/21/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1362 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\system32\svchost.exe -k HPService
C:\PROGRA~1... Read more

A:Slow computer, search engine redirects, etc.

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

---------------------------------------------------------------------------------------------

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Place combofix.exe on your Desktop
Disable your AntiVirus and AntiSpyware applications,... Read more

Read other 19 answers
RELEVANCY SCORE 50.4

I have the same issue that ShankMcGank had in this thread that is now closed.

http://forums.techguy.org/windows-7/980685-web-pages-suddenly-slow-load.html

In fact, this site is very slow on every page.

I get a message at the bottom of the page that says "awaiting HTTP:// then some ad site (doubleclick.net or google ads etc).

Any ideas?

This only just started happening about two weeks ago and I have run anti virus, malwarebytes, adaware etc and eveything is clean.

Thanks
 

A:Pages Slow to Load while waiting on Advertising Sites

Read other 14 answers
RELEVANCY SCORE 50.4

Hey guys, My computer (vista laptop 32 bit) has been extremely slow lately. It cannot connect to spy bot or trend micro to download updates for their various programs (spy bot and the trend micro online scan). It occasionally redirects me to somewhere random when i Google stuff. Sometimes the Google links do not even work, and other times it redirects me to face book. I have included my hijack this log file as a starting point. If anyone has any ideas can you please help me out!!!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:27:05 PM, on 30/03/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18882)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Windows\System32\WLTRAY.EXEC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files\Avira\AntiVir Desktop\avgnt.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\... Read more

A:Computer is slow, internet redirects or drops pages

Hello Kyle Evans Welcome to the BC HijackThis Log and Analysis forum. I will be assisting you in cleaning up your system.I ask that you refrain from running tools other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond the your topic and facilitate the cleaning of your machine.Please keep in mind that we have a large backlog of users just like yourself waiting to be helped so try to be as timely as possible in your replies. Since we do this on a part-time voluntary basis we are limited on how many logs we can respond to and keep open due to time restraints. If you have to be away or can't answer for some other reason just let me know. Thank you for your understanding.After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.In order to better assist you I will need the following:Download DDS and save it to your desktop from here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to you... Read more

Read other 29 answers
RELEVANCY SCORE 50.4

The computer has recently been getting very slow, and when it does, Task Manager shows ping.exe taking more than 80% of the CPU and using some hundreds of MB of memory. Sometimes clicking on a Google result gives a webpage that was not what the URL was.

Any help you can offer is welcome.
DDS log:
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Run by Kyle at 16:56:03 on 2011-12-22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.323 [GMT -5:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
D:\Programs\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system3... Read more

A:Slow computer, ping.exe, google result redirects

Hi,Please do the following:Download ComboFix from one of the following locations:Link 1 Link 2 VERY IMPORTANT !!! Save ComboFix.exe to your Desktop * IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\C... Read more

Read other 12 answers
RELEVANCY SCORE 50.4

This Dell 1505 computer has suddenly developed problems. Weeks ago, the computer bagan to run slower and slower. It usually would not shut down from the Startup Menu, but the button had to be pushed. It often would freeze during typical, internet browsing on AOL It suddenly experienced pop-up screens requesting credit card numbers from AOL or Qwest, both fake websites. It occasionally won?t open IE or Firefox from either a ?shortcut? or from the Startup Menu. Even when it does open these browsers, it often freezes in a few minutes. It seems to be writing continuously to the hard drive. In working with Technical Support Forum, dds scans were obtained successfully, but twice the computer shut down with a blue screen memory dump while running a gmer scan with the message "problem seems to be caused by the following file: fxtdqpow.sys". It previously showed a blue screen memory dump after scanning for an hour with Microsoft.com/security/malwareremove, and ending on the open port scan.

I will provide DDS.txt (pasted) and attach.txt (attached) the Gmer scan caused the computer to freeze. Please help...


DDS (Ver_10-03-17.01) - NTFSx86
Run by Kathryn at 11:11:25.82 on Wed 03/31/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1484 [GMT -6:00]

AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *d... Read more

A:Computer freezes, redirects, slow, won't open browsers

Hello and Welcome to TSF

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools,
then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.



Please download Malwarebytes' Anti-Malware from Here

Note: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy and Paste the entire report in your next reply .
Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the di... Read more

Read other 19 answers
RELEVANCY SCORE 50.4

Hi,

Have been experiencing some problems with my computer. The anti virus programs I've used have recently picked up, and "cured" a variety of trojans - not entirely sure of the names now as this was a few days ago, but I'm fairly sure I saw one of them (Hitman Pro) pick up Sirefef. Have been experiencing a few symptoms of some form of virus. Most obviously, there are iexplore.exe processes being automatically started even though I don't use Internet Explorer, and also using google search results often redirects me to adverts. I'm also fairly sure my computer is running more slowly than usual. Have gone as far as I can with a variety of different malware/antivirus tools (mbam, hitman, superantispyware, mcafee), none of them find anything anymore but issues remain - would appreciate some help.

Thanks in advance

A:iexplore.exe Processes, Slow Computer, Occasional Redirects

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

Read other 6 answers
RELEVANCY SCORE 50.4

This is my reply to the last post:

I did a DDS scan and have posted the DDS log. This log was the only one that showed up, though; there was no "attach" log.

GMER also won't open. It shows it's running in Task Manager, but with 0 CPU.

Anyways, here is the "DDS.txt":


DDS (Ver_10-10-21.02) - NTFSx86
Run by Administrator at 18:59:54.82 on Fri 10/29/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2559.1504 [GMT -6:00]

AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

============== Running Processes ===============

C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Java\jre6... Read more

A:[SOLVED] (New) Computer Slow with Google Search Redirects. PLEASE HELP!!!

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.



I'd really like to see if Gmer will run - try these instructions please:

Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during ... Read more

Read other 19 answers
RELEVANCY SCORE 50.4

Hi,

Please see attached Hijackthis log. I am unable to read the sticky on rules for posts as I am getting an error message when I try to access the window. I use both IE and firefox but mostly IE.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:50:34, on 02-10-2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Synap... Read more

A:Slow computer. IE Crashes. Google Search Redirects. Please help

Read other 12 answers
RELEVANCY SCORE 50.4

Hello,

My computer appears to be quite a bit slower than it should be, and from time to time, the start-up is especially slow. I recently cleaned the dust, and that's helped a bit. But often, the computer will just crash and become unresponsive, like when I turn off the computer, it sometimes doesn't respond or when I try to open/close a program, it doesn't appear the computer has got the command.

As well, whenever I start-up, I get a RUNDLL message saying there's an error with C:\WINDOWs\wmleusy.dll. I have searched that file on google, and it seems non existent.

My audio keeps on shutting down, so I constantly have to go to services.msc to restart the audio. In addition to that, the warning/alert sound keeps on sounding off, but nothing pops up and I'm not sure what it is indicating.

And lastly, my Google search results constantly redirect me to other pages, and it's not until say the 5th try do I actually get the desired search result. On top of that, I've got ads that pop up in my tabs despite my ad-blockers. (Electric moustache, wal-mart, etc.)

Edit: I just tried to do a Windows Update via website, but it won't load, and even entering it in wikipedia brings me the Problem loading page screen.

I have run Malwarebytes, but it doesn't seem to give me any good results. My logs are as follow.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:33:18 PM, on 7/9/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Inter... Read more

A:Slow computer/start-up, search redirects, and unresponsive

bump
 

Read other 1 answers
RELEVANCY SCORE 50.4

So my computer is running really slow. I get some redirects to shopping websites when I use Google sometimes, and explorer crashes whenever I try to run the CMD. I have scanned my computer using McAfee, Ad-Aware, and Malwarebytes' Anti-Malware, but it keeps doing it.

I using Windows XP.

Any suggestions?

A:Computer running slow, some redirects, and explorer crashes

Please post your your Malwarebytes log and let's start from there.

Read other 16 answers
RELEVANCY SCORE 49.6

computer running slow, redirecting going on. I have tried MBAM but the virus comes back.
 
Windows Vista Home Premium Service Pack 1 (build 6001)
GATEWAY FX541S 110
System Serial Number: 1102159029
Enclosure Type: Desktop
 
2.40 gigahertz Intel Core2 Quad
64 kilobyte primary memory cache
4096 kilobyte secondary memory cache
64-bit ready
Multi-core (4 total)
Not hyper-threaded
 
 
Thanks ... Gary

A:Infected computer, Slow, Redirects, Mbam removes then comes back

Hi and Welcome!!   
 
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
 
Having said that....     Let's get going!!  
----------
 It looks like you are running Windows Vista Service Pack (SP) 1?  The latest version is SP2....any reason you have not updated your system?  I don't want... Read more

Read other 21 answers