Victor222

Computer Running Slow and all viedo choppy all of a sudden

25 posts in this topic

I am running windows XP Home Edition Service Pack 3 1.60 Ghz processor with 2GB of Ram.

I run Eset Smart Security 5, CCleaner, Malwarebytes, Spywareblaster, Spybot Search & Destroy, PC Tools Registry Mechanic and Glary Utlities. Not sure what other inforamtion is pertinent. All of a sudden my computer is running slow and it's taking a while to open multible tabs and no video plays without choppyness. Before writing this I performed all the above programs with no results. Any help would be appreciated.

Share this post


Link to post
Share on other sites

Computer and browser slowness are not always malware related

You can find an excellent explanation from AdvancedSetup Located Here

That being said, if you think you may have an infection then follow the instructions below:

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

IMPORTANT: Don't use any temporary file cleaners unless requested - this can cause data loss and make recovery difficult

You have 3 Options that you can choose from as listed below:

  • Option 1 —— Free Expert advice in the Malware Removal Forum
  • Option 2 —— Paying customer -- Contact Support via email
  • Option 3 —— Premium, Fee-Based Support

OPTION 1

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the

Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

  • Please read and follow the directions >>Right HERE<<, skipping any steps you are unable to complete.
  • After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification,
    so that you're alerted when someone has replied to your post.

NOTE: Please do not post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies.

If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

  • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
  • You may send a Private Message to a Moderator asking for assistance.

OPTION 2

Alternatively, as a paying customer, you can contact the help desk by filling out the form located >>Right HERE<<

OPTION 3

If you would like to use our Malwarebytes Premium Services, Comprehensive solutions to all your computer support needs—from installation and set-up to troubleshooting and tune-ups go to our Malwarebytes Premium Services support site >>Right HERE<<

Please be patient, someone will assist you as soon as possible.

PS: Please use the "Reply to this Topic" or "More Reply Options" buttons (instead of the “Quote” and “MultiQuote” buttons) when replying here & at the other forums. That will make your topic easier to follow. :)

Share this post


Link to post
Share on other sites

Hi, victor222:

In addition to Firefox's excellent and expert suggestions :) (especially the link to that recent post by AdvancedSetup), there is also a sticky topic by forum mod, Exile360, with some additional suggestions for the slow PC issue: Slow PC? Start Here

As Firefox suggests, you might want to start with these 2 excellent articles first, unless you think you might be infected.

In the latter case, please follow Firefox's suggestions to have a qualified malware expert take a look at your system.

Cheers!

daledoc1

PS This topic doesn't seem to relate directly to anything about MBAM per se, so a mod will likely move it to the PC Help section. :)

Share this post


Link to post
Share on other sites

Hi, victor222:

In addition to Firefox's excellent and expert suggestions :) (especially the link to that recent post by AdvancedSetup), there is also a sticky topic by forum mod, Exile360, with some additional suggestions for the slow PC issue: Slow PC? Start Here

As Firefox suggests, you might want to start with these 2 excellent articles first, unless you think you might be infected.

In the latter case, please follow Firefox's suggestions to have a qualified malware expert take a look at your system.

Cheers!

daledoc1

PS This topic doesn't seem to relate directly to anything about MBAM per se, so a mod will likely move it to the PC Help section. :)

I followed every step that was provided in the link and everything seems to back in order. Videoas play without choppyness and window tabs load quickly. Thanks what seemed to be the problem?

Share this post


Link to post
Share on other sites

Glad to hear its all back to normal working order.... Hard to say exactly what was wrong but most likely it was a bunch of temp files bogging things down.

Share this post


Link to post
Share on other sites

Glad to hear its all back to normal working order.... Hard to say exactly what was wrong but most likely it was a bunch of temp files bogging things down.

Glad to hear its all back to normal working order.... Hard to say exactly what was wrong but most likely it was a bunch of temp files bogging things down.

I spoke to soon just tried to watch video on ESPN and choppy that you vcannpot view or hear it clearly. This is the main issue with the comuter no video seems to play perfect

Share this post


Link to post
Share on other sites

Have you checked you bandwidth speeds, when you video is playing choppy open up task manager and see if any process it taking up processor power/CPU usage.

Share this post


Link to post
Share on other sites

Have you checked you bandwidth speeds, when you video is playing choppy open up task manager and see if any process it taking up processor power/CPU usage.

CPU Usage was at 100%

Network Utilization about 12.5% but don;t see bandwidth in task manager

Share this post


Link to post
Share on other sites

Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool, on Vista or Win 7 right click and select Run as administrator

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.


    When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt

  • Save both reports to your desktop
  • Please include the following logs in your next reply: DDS.txt and Attach.txt
    You can ignore the note about zipping the Attach.txt file in most cases.

Share this post


Link to post
Share on other sites

what process it taking the CPU to 100%?

check your bandwidth by going to www.speedtest.net then wait for the page to load then click on Begin Test

Share this post


Link to post
Share on other sites

what process it taking the CPU to 100%?

check your bandwidth by going to www.speedtest.net then wait for the page to load then click on Begin Test

attach.txt

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows XP Home Edition

Boot Device: \Device\HarddiskVolume1

Install Date: 11/23/2011 10:35:07 AM

System Uptime: 7/16/2012 3:50:11 PM (24 hours ago)

.

Motherboard: TOSHIBA | | Portable PC

Processor: Intel® Pentium® M processor 1.60GHz | mFCPGA | 1595/133mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 75 GiB total, 50.008 GiB free.

D: is CDROM ()

E: is FIXED (NTFS) - 1863 GiB total, 301.987 GiB free.

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP1: 7/15/2012 5:48:45 PM - System Checkpoint

.

==== Installed Programs ======================

.

µTorrent

32 Bit HP CIO Components Installer

4500_Help

Adobe AIR

Adobe Community Help

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Media Player

Adobe Photoshop CS5

Adobe Reader X (10.1.3)

Adobe Shockwave Player 11.6

Aimersoft DVD Ripper(Build 2.7.2.0)

Akamai NetSession Interface

Apple Application Support

Apple Mobile Device Support

Apple Software Update

AT&T Connection Services Manager

Auslogics BoostSpeed 5.2

Bonjour

bpd_scan

BPDSoftware

BPDSoftware_Ini

BufferChm

CCleaner

CD/DVD Drive Acoustic Silencer

Combined Community Codec Pack 2011-11-11

Coupon Printer for Windows

Destination Component

DeviceDiscovery

DeviceManagementQFolder

DocMgr

DocProc

DocProcQFolder

DriverMax 6

DVD-RAM Driver

eSupportQFolder

Fax

FileHippo.com Update Checker

Glary Utilities 2.46.0.1518

GPBaseService

Hewlett-Packard ACLM.NET v1.1.0.0

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows XP (KB915800-v4)

HP Document Manager 1.0

HP Imaging Device Functions 10.0

HP Officejet J4500 Series

HP Product Detection

HP Solution Center 10.0

HP Update

HPDiagnosticAlert

HPProductAssistant

Image Resizer Powertoy for Windows XP

Image to OCR Converter 1.2

Intel® Graphics Media Accelerator Driver

Intel® PROSet/Wireless Software

iTunes

J4500

Java Auto Updater

Java 6 Update 30

Java 7 Update 5

JavaFX 2.1.1

K-Lite Codec Pack 7.0.0 (Standard)

Malwarebytes Anti-Malware version 1.62.0.1300

mCore

mDrWiFi

mEoU.msi

mHelp

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB2656353)

Microsoft .NET Framework 1.1 Security Update (KB2656370)

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft Base Smart Card Cryptographic Service Provider Package

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Groove MUI (English) 2010

Microsoft Office InfoPath MUI (English) 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Word MUI (English) 2010

Microsoft Software Update for Web Folders (English) 14

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

mIWA

mIWCA

mLogView

mMHouse

Mozilla Firefox 13.0.1 (x86 en-US)

Mozilla Maintenance Service

mPfMgr

mPfWiz

mProSafe

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

mWlsSafe

mXML

mZConfig

Nero 8 Ultra Edition HD

neroxml

NTREGOPT 1.1j

OCR Software by I.R.I.S. 10.0

PC Tools Registry Mechanic 11.0

ProductContext

Roxio Burn Engine

Scan

SD Secure Module

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Windows Internet Explorer 7 (KB2544521)

Security Update for Windows Internet Explorer 7 (KB2586448)

Security Update for Windows Internet Explorer 7 (KB2618444)

Security Update for Windows Internet Explorer 7 (KB2647516)

Security Update for Windows Internet Explorer 7 (KB982381)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2618444)

Security Update for Windows Internet Explorer 8 (KB2647516)

Security Update for Windows Internet Explorer 8 (KB2675157)

Security Update for Windows Internet Explorer 8 (KB2699988)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Search 4 - KB963093

Security Update for Windows XP (KB2621440)

Security Update for Windows XP (KB2641653)

Security Update for Windows XP (KB2647518)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2655992)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2660465)

Security Update for Windows XP (KB2661637)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2685939)

Security Update for Windows XP (KB2686509)

Security Update for Windows XP (KB2691442)

Security Update for Windows XP (KB2695962)

Security Update for Windows XP (KB2698365)

Security Update for Windows XP (KB2707511)

Security Update for Windows XP (KB2709162)

Security Update for Windows XP (KB2718523)

Security Update for Windows XP (KB2719985)

Skype™ 5.8

Smart Defrag 2

SolutionCenter

Sonic DLA

SoundMAX

Spybot - Search & Destroy

SpywareBlaster 4.6

Status

swMSM

Synaptics Pointing Device Driver

Texas Instruments PCIxx21/x515 drivers.

TIxx21/x515

Toolbox

TOSHIBA Assist

TOSHIBA ConfigFree

TOSHIBA Controls

TOSHIBA Hotkey Utility

TOSHIBA PC Diagnostic Tool

Toshiba Registration

TOSHIBA SD Memory Card Format

TOSHIBA Software Modem

TOSHIBA Software Upgrades

TOSHIBA Speech System Applications

TOSHIBA Speech System SR Engine(U.S.) Version1.0

TOSHIBA Speech System TTS Engine(U.S.) Version1.0

Toshiba Tbiosdrv Driver

TOSHIBA TouchPad ON/Off Utility

TOSHIBA Utilities

TOSHIBA Virtual Sound

TOSHIBA Zooming Utility

Touch and Launch

TrayApp

TVersity Codec Pack 1.7

TVersity Media Server 1.9.7

Unlocker 1.9.1

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Windows Internet Explorer 8 (KB2598845)

Update for Windows Internet Explorer 8 (KB2632503)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2492386)

Update for Windows XP (KB2718704)

Viewpoint Media Player

VLC media player 2.0.2

WebFldrs XP

WebReg

Windows Internet Explorer 8

Windows Management Framework Core

Windows Media Format 11 runtime

Windows Media Player 11

Windows XP Service Pack 3

WinRAR 4.10 beta 1 (32-bit)

Xiph.Org Open Codecs 0.85.17777

XML Paper Specification Shared Components Pack 1.0

.

==== Event Viewer Messages From Past Week ========

.

7/17/2012 3:47:02 PM, error: yukonwxp [101] - Driver status 1

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The TOSHIBA Application Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The Swupdtmr service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The SoundMAX Agent Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The RegSrvc service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The PLFlash DeviceIoControl Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The PC Tools Startup and Shutdown Monitor service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The OwnershipProtocol service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The NMIndexingService service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The Nero BackItUp Scheduler 3 service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:20 PM, error: Service Control Manager [7031] - The ESET Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

7/15/2012 5:32:19 PM, error: Service Control Manager [7034] - The DVD-RAM_Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:19 PM, error: Service Control Manager [7034] - The ConfigFree Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:19 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:16 PM, error: Service Control Manager [7034] - The Spectrum24 Event Monitor service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:16 PM, error: Service Control Manager [7034] - The EvtEng service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:16 PM, error: Service Control Manager [7034] - The Agere Modem Call Progress Audio service terminated unexpectedly. It has done this 1 time(s).

7/15/2012 5:32:16 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

7/14/2012 8:12:42 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.

7/11/2012 1:57:18 AM, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.

7/10/2012 2:32:37 AM, error: Service Control Manager [7031] - The TVersity Media Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.

.

==== End Of File ===========================

Share this post


Link to post
Share on other sites

what process it taking the CPU to 100%?

check your bandwidth by going to www.speedtest.net then wait for the page to load then click on Begin Test

dds.txt

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.5.1

Run by Victor Markiewicz at 15:46:50 on 2012-07-17

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.938 [GMT -4:00]

.

AV: ESET Smart Security 5.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

FW: ESET Personal firewall *Disabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

svchost.exe

C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe

svchost.exe

C:\WINDOWS\system32\agrsmsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe

C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe

C:\Program Files\Toshiba\Tvs\TvsTray.exe

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe

C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe

C:\WINDOWS\system32\DVDRAMSV.exe

C:\Program Files\ESET\ESET Smart Security\egui.exe

C:\Program Files\ESET\ESET Smart Security\ekrn.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\Victor Markiewicz\Local Settings\Application Data\Akamai\netsession_win.exe

C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

C:\WINDOWS\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\Documents and Settings\Victor Markiewicz\Local Settings\Application Data\Akamai\netsession_win.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe

C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

C:\WINDOWS\system32\IoctlSvc.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

c:\TOSHIBA\IVP\swupdate\swupdtmr.exe

C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

C:\Program Files\TVersity\Media Server\MediaServer.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

svchost.exe

C:\WINDOWS\system32\cisvc.exe

C:\WINDOWS\SYSTEM32\cidaemon.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\WINDOWS\SYSTEM32\taskmgr.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.toshibadirect.com/dpdstart

uInternet Connection Wizard,ShellNext = hxxp://toolbar.google.com/done

uInternet Settings,ProxyOverride = <local>;*.local

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\toscdspd.exe

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Akamai NetSession Interface] "c:\documents and settings\victor markiewicz\local settings\application data\akamai\netsession_win.exe"

uRun: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020

uRun: [DriverMax_RESTART]

mRun: [synTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [THotkey] c:\program files\toshiba\toshiba applet\thotkey.exe

mRun: [NDSTray.exe] NDSTray.exe

mRun: [AGRSMMSG] AGRSMMSG.exe

mRun: [smoothView] c:\program files\toshiba\toshiba zooming utility\SmoothView.exe

mRun: [Tvs] c:\program files\toshiba\tvs\TvsTray.exe

mRun: [soundMAXPnP] c:\program files\analog devices\soundmax\SMax4PNP.exe

mRun: [dla] c:\windows\system32\dla\tfswctrl.exe

mRun: [PadTouch] c:\program files\toshiba\touch and launch\PadExe.exe

mRun: [intelWireless] c:\program files\intel\wireless\bin\ifrmewrk.exe /tf Intel PROSet/Wireless

mRun: [EOUApp] c:\program files\intel\wireless\bin\EOUWiz.exe

mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"

mRun: [switchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe

mRun: [AdobeCS5ServiceManager] "c:\program files\common files\adobe\cs5servicemanager\CS5ServiceManager.exe" -launchedbylogin

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSCONFIG.EXE /auto

mRun: [Aimersoft Helper Compact.exe] c:\program files\common files\aimersoft\aimersoft helper compact\ASHelper.exe

mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe

mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"

mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

StartupFolder: c:\docume~1\victor~1\startm~1\programs\startup\onenote 2010 screen clipper and launcher.lnk - c:\program files\microsoft office\office14\ONENOTEM.EXE

uPolicies-explorer: NoInstrumentation = 1

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105

IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683}

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\Skype4COM.dll

Notify: igfxcui - igfxdev.dll

Notify: IntelWireless - c:\program files\intel\wireless\bin\LgNotify.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\victor markiewicz\application data\mozilla\firefox\profiles\gu4vk7c7.default\

FF - plugin: c:\documents and settings\victor markiewicz\application data\mozilla\firefox\profiles\gu4vk7c7.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll

FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL

FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll

FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_265.dll

FF - plugin: c:\windows\system32\npdeployJava1.dll

FF - plugin: c:\windows\system32\npptools.dll

.

============= SERVICES / DRIVERS ===============

.

R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2012-6-12 14776]

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2012-3-14 120152]

R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2012-3-7 913144]

R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\common files\pc tools\smonitor\StartManSvc.exe [2011-11-23 793048]

R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-2-15 158856]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-2-23 250056]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2010-1-21 30963576]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-5-9 113120]

S3 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-11-15 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== File Associations ===============

.

cmdfile=NOTEPAD.EXE %1

JSEFile=NOTEPAD.EXE %1

VBSFile=NOTEPAD.EXE %1

.

=============== Created Last 30 ================

.

2012-07-15 19:02:34 -------- d-----w- c:\program files\NT Registry Optimizer

2012-07-15 00:26:13 -------- d-----w- c:\documents and settings\victor markiewicz\local settings\application data\Innovative Solutions

2012-07-14 22:06:04 -------- d-----w- c:\documents and settings\victor markiewicz\local settings\application data\SlimWare Utilities Inc

2012-07-11 02:24:24 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-07-11 02:24:24 107368 ----a-w- c:\windows\system32\GEARAspi.dll

2012-07-11 02:20:45 -------- d-----w- c:\program files\iPod

2012-07-11 02:20:37 -------- d-----w- c:\program files\iTunes

2012-07-11 02:20:37 -------- d-----w- c:\documents and settings\all users\application data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

2012-07-11 02:19:55 -------- d-----w- c:\documents and settings\victor markiewicz\local settings\application data\Apple

2012-07-11 02:19:27 4547944 ----a-w- c:\windows\system32\usbaaplrc.dll

2012-07-11 02:19:27 43520 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2012-07-11 02:18:57 -------- d-----w- c:\program files\Bonjour

2012-07-11 02:11:23 -------- d-----w- c:\documents and settings\victor markiewicz\application data\redsn0w

2012-06-26 14:23:26 -------- d-----w- c:\program files\Oracle

.

==================== Find3M ====================

.

2012-07-12 03:35:15 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-07-12 03:35:15 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-07-03 17:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-06-21 16:05:38 230808 ----a-r- c:\windows\system32\cpnprt2.cid

2012-06-13 13:19:59 1866112 ----a-w- c:\windows\system32\win32k.sys

2012-06-05 15:50:25 1372672 ------w- c:\windows\system32\msxml6.dll

2012-06-05 15:50:25 1172480 ----a-w- c:\windows\system32\msxml3.dll

2012-06-04 04:32:08 152576 ----a-w- c:\windows\system32\schannel.dll

2012-06-02 19:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui

2012-06-02 19:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl

2012-06-02 19:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui

2012-06-02 19:19:34 15384 ----a-w- c:\windows\system32\wuapi.dll.mui

2012-06-02 19:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui

2012-05-31 13:22:09 599040 ----a-w- c:\windows\system32\crypt32.dll

2012-05-16 15:08:26 916992 ----a-w- c:\windows\system32\wininet.dll

2012-05-11 14:42:33 43520 ------w- c:\windows\system32\licmgr10.dll

2012-05-11 14:42:33 1469440 ------w- c:\windows\system32\inetcpl.cpl

2012-05-11 11:38:02 385024 ------w- c:\windows\system32\html.iec

2012-05-08 22:35:14 29528 ----a-w- c:\windows\system32\SmartDefragBootTime.exe

2012-05-04 23:29:50 143872 ----a-w- c:\windows\system32\javacpl.cpl

2012-05-04 23:29:22 772504 ----a-w- c:\windows\system32\npdeployJava1.dll

2012-05-04 23:29:16 687504 ----a-w- c:\windows\system32\deployJava1.dll

2012-05-04 13:12:30 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-05-04 12:32:19 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe

2012-05-03 23:21:51 477240 ----a-w- c:\windows\system32\drivers\sptd.sys

2012-05-02 13:46:36 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys

.

============= FINISH: 15:47:33.27 ===============

Share this post


Link to post
Share on other sites

Well you may or may not be infected but you sure have a lot of errors in your Event Logs from the attach.txt log.

That is often a sign of either sofware conflicting with each other or an infection.

I would recommend that you do as requested and have someone assist you in checking your computer for an infection.

You need to either uninstall this software of fully disable it from running though if you want help with checking for an infection.

This is like opening a backdoor directly into your computer and asking to get infected sooner or later - it's jut a matter of time.

µTorrent

You should uninstall the following older Java which can also potentially make it easier to infect the computer.

Java™ 6 Update 30

You should also uninstall this software which is pretty much Snake Oil and can often cause more harm than good.

PC Tools Registry Mechanic 11.0

The company behind this product was found to be stealing our database.

Personally I would not trust installing any software from a company that resorts to stealing someone's technology to sell their product.

Please see the following links and make up your own mind if you want to keep this on your system. If needed I can help you remove it but it should be easy to remove from the control panel, add/remove.

Smart Defrag 2

Share this post


Link to post
Share on other sites

Thanks AdvancedSetup for stepping in with your excellent instructions....

@ Victor222 you will find the instructions to get your computer checked out above in my post # 2 above (HERE), choose Option 1, 2 or 3.

Share this post


Link to post
Share on other sites

Well you may or may not be infected but you sure have a lot of errors in your Event Logs from the attach.txt log.

That is often a sign of either sofware conflicting with each other or an infection.

I would recommend that you do as requested and have someone assist you in checking your computer for an infection.

You need to either uninstall this software of fully disable it from running though if you want help with checking for an infection.

This is like opening a backdoor directly into your computer and asking to get infected sooner or later - it's jut a matter of time.

µTorrent

You should uninstall the following older Java which can also potentially make it easier to infect the computer.

Java™ 6 Update 30

You should also uninstall this software which is pretty much Snake Oil and can often cause more harm than good.

PC Tools Registry Mechanic 11.0

The company behind this product was found to be stealing our database.

Personally I would not trust installing any software from a company that resorts to stealing someone's technology to sell their product.

Please see the following links and make up your own mind if you want to keep this on your system. If needed I can help you remove it but it should be easy to remove from the control panel, add/remove.

Smart Defrag 2

Is there a better option rather than uTorrent?

How do I specifically remove older java files?

I uninstalled Smart Defrag 2 what is a better defrag free program?

Share this post


Link to post
Share on other sites

How about using ""JavaRa is a free utility that will permanently remove all old and vulnerable versions of Java from your PC. Usage couldn't be simpler: just download it and run it."

Share this post


Link to post
Share on other sites

How about using ""JavaRa is a free utility that will permanently remove all old and vulnerable versions of Java from your PC. Usage couldn't be simpler: just download it and run it."

Nebvermind went to add and remove and deleted Java 6 update 30

Share this post


Link to post
Share on other sites

If I uninstalled java update 30 how do I know if I should download the newest java update? Is there a website or forum that updates what are problem area updates or programs?

Share this post


Link to post
Share on other sites

Oh one last thing I am running Uverse with 12mbits of speed and according to ATT they say the 18mbits is optimal for video.

Share this post


Link to post
Share on other sites

@ Victor222 you will find the instructions to get your computer checked out above in my post # 2 above (HERE), choose Option 1, 2 or 3.

Please have your computer checked out first, once you have been given the all clear, all of your other questions or concerns can be delt with.

Share this post


Link to post
Share on other sites

@ Victor222 you will find the instructions to get your computer checked out above in my post # 2 above (HERE), choose Option 1, 2 or 3.

Please have your computer checked out first, once you have been given the all clear, all of your other questions or concerns can be delt with.

I tried all of the tips and steps to clean PC and did each one not interested in paying because of the financial instability I am in.

Share this post


Link to post
Share on other sites

Please re-read the topic. You do not need to pay to have someone help you.

Simply choose option 1 and create a NEW post in the HJT forum as requested please.

Here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

Don't use any temporary file cleaners unless requested - this can cause data loss and make recovery difficult

You have 3 Options that you can choose from as listed below:

  • Option 1 —— Free Expert advice in the Malware Removal Forum
  • Option 2 —— Paying customer -- Contact Support via email
  • Option 3 —— Premium, Fee-Based Support

OPTION 1

As we don't deal with malware removal in the
General Malwarebytes' Anti-Malware Forum
, you need to start a topic in the

Malware Removal forum
so a qualified helper can help you fix any malware related problems or infections you may have.

  • Please read and follow the directions here, skipping any steps you are unable to complete.
  • After posting your new post, make sure under options, you select Follow this topic and choose Instantly,
    so that you're alerted when someone has replied to your post.

NOTE: Please do not post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies.

If you reply to your own post helpers may think that you're already being helped and thus overlook your post.


    • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
      Or
    • You may send a Private Message to a Moderator asking for assistance.

OPTION 2

Alternatively, as a paying customer, you can contact the help desk
here

OPTION 3

If you would like to use our
Malwarebytes Premium Consumer Services
partner, Comprehensive solutions to all your computer support needs—from installation and set-up to troubleshooting and tune-ups go to our
Malwarebytes Premium Services
support site.

Please be patient, someone will assist you as soon as possible.

Share this post


Link to post
Share on other sites

I did all of that except I ran the full scan and attached both files DDX.txt and Attach.txt see the files I downloaded in a few previous posts

Share this post


Link to post
Share on other sites

You need to post the required logs and start a new topic and post the logs in that topic located => HERE

They will continue to help you in that section.

Share this post


Link to post
Share on other sites

Great I see the post. Now simply be patient and wait for someone to assist you.

Thanks

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.