http://forum.iamnotageek.com/ Malware, Adware, Spyware/HJT (Hijack This!) Assistance en Fri, 18 May 2012 02:13:24 GMT vBulletin 100 http://forum.iamnotageek.com/images/misc/rss.png http://forum.iamnotageek.com/ http://forum.iamnotageek.com/showthread.php/11393-Task-Manager-Closes-instantly-after-Opening-it?goto=newpost Sun, 29 Apr 2012 05:24:01 GMT I'm having a problem with my computer right now. every time I try to open windows task manager or regedit, it closes immediately. my computer also seemed to have slowed down a bit. Any help would be appreciated.

Here is the log of Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:57:10 PM, on 4/28/2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBottedTray.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\USB 2.0 PC CAMERA\Camera Snap.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\user\My Documents\sir files2\Antivirus stuff\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Microsoft Helper - {C9C42510-9B41-42c1-9DCD-7282A2D07C65} - C:\Documents and Settings\user\Application Data\Microsoft\BHO32-WGSTI.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TMRUBottedTray] "C:\Program Files\Trend Micro\RUBotted\TMRUBottedTray.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Microsoft Firewall 2.9] C:\DOCUME~1\user\LOCALS~1\Temp\MSFW.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Snap] C:\Program Files\USB 2.0 PC CAMERA\Camera Snap.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Microsoft Firewall 2.9] C:\DOCUME~1\user\LOCALS~1\Temp\MSFW.exe
O4 - HKCU\..\Run: [Fmjqjv] C:\Documents and Settings\user\Application Data\Fmjqjv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [{00831268-F9C4-4268-6859-0DE0A84C49DD}] "C:\Documents and Settings\user\Application Data\Ewcia\paqu.exe"
O4 - HKCU\..\Run: [Microsoft Security Essentials] C:\Documents and Settings\user\Application Data\explorateur\explorateur.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpda teService.exe
O23 - Service: BCL easyPDF SDK Loader (ai7m5fmis4mqn) - Unknown owner - C:\WINDOWS\system32\louhyt.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: BeTwin Terminal Services (aoypd6oayuyu) - Unknown owner - C:\Documents and Settings\LocalService\Application Data\Microsoft\duridou.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762# # (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Network Connectivity Service (lo6moirc7diuot) - Unknown owner - C:\WINDOWS\system32\nafuwoul.exe (file missing)
O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe
O23 - Service: ASF Agent (yj5y8iul9f) - Unknown owner - C:\Documents and Settings\LocalService\Application Data\Microsoft\vipymmiroo.exe (file missing)

--
End of file - 6135 bytes ]]> Spyware Central gyvs http://forum.iamnotageek.com/showthread.php/11393-Task-Manager-Closes-instantly-after-Opening-it http://forum.iamnotageek.com/showthread.php/11392-Stop-using-hijackthis.?goto=newpost Sat, 28 Apr 2012 12:23:49 GMT F.Y.I. The program known as HiJackThis, often used in the past to assist with malware removal is no longer used and no longer being updated by Trend... F.Y.I. The program known as HiJackThis, often used in the past to assist with malware removal is no longer used and no longer being updated by Trend Micro.
With the introduction of the Vista operating system and continuing now with the introduction of Windows7, HiJackThis just "didn't do the job". It failed to see correctly installed and actively working Windows services and processes. It also failed to recognize perfectly legitimate drivers now used on first Vista and now Windows 7.
With the additional security added to Windows 7 there are many "errors" noted by HiJackThis, which, in reality, are NOT true errors or signs of infection but triggered by this additional operating system security.
We strongly advise that people stop using this program when a malware problem is suspected and use instead the widely accepted DDS scanner. It does a more thorough scan and produces a much more detailed description of the computer and what may be going on with the computer. st ]]> Spyware Central jholland1964 http://forum.iamnotageek.com/showthread.php/11392-Stop-using-hijackthis. http://forum.iamnotageek.com/showthread.php/11388-Everything-very-slow-constant-need-for-reboot.?goto=newpost Mon, 23 Apr 2012 12:45:48 GMT My computer is currently experiencing problems that mean after rebooting everything just gets slower and slower until everything barely responds at... My computer is currently experiencing problems that mean after rebooting everything just gets slower and slower until everything barely responds at all and I have to shurt everything down and reboot. It takes minutes to just close the limted number of windows that I have open, after reboot everything is fine for a few minutes sometimes up to 10-15 minutes and then everything begins to brind to a halt again.

I currently only have dial up on this computer so have recently been trying to download smaller anti virus and spyware software as anything over 40mb just takes an age to download. It was whilst downloading malewarebytes that this problem seemed to begin. I had installed it and was running it when a box came up for a guard of some sort i think, I went to click no, but before i could the screen froze up and nothing happened leading me to have to reboot. After that everything seemed to freeze not long after reboot I also noticed the malwarebytes guard seemed to be running as well. In the end after this persisting for sometimes I did a system restore which seemed to clear up some of the problem.

Nothing freezes any longer, but everything just gets slower and slower. My diap up drops from 44-46kb/s to less than 400b/s, and any other pogram I have running seems to respond very slowly to commands.

I read the sticky post about read before you post and attempted to do as much of it as possible. I did managed to do the malwarebytes scan but that came back fine. I wasn't able to do any of the online AV scans as they just wouldn't load before my dial up connection started going through the floor, I was able to download the dds and have done that as well.

Any help with my problem would be greatly appreciated, thank you in advance. ]]> Spyware Central dinamo http://forum.iamnotageek.com/showthread.php/11388-Everything-very-slow-constant-need-for-reboot.