Internet Slowdown & Possible Hijacking

[wayno1021]

I did as you asked and remved Spywarebot using the Add/Remove feature in Control Panels. I thought this was Spybot S&D, that is why I didn't remove it earlier.

I also followed your instructions and ran another HJT scan, checked what you told me to and clicked the fix button.

I reboot and ran another HJT scan. Here is the log:

(see HJTLog052207 attached)

[jholland1964]

The reason I asked about AOL and also the McAfee is this...you DO have some AOL entries showing in your log that you need to get rid of...
I asked about McAfee because the AOL Security Center is McAfee based so I wanted to be certain it was just "plain" McAfee and not the AOL version because one of the programs set to run at Start is AOL Spyware Protection.

You need to do go to Add/Remove and look for anything AOL and remove it. Then you need to go to Start, Search, Files and Folders, "C" drive and search for AOL. Delete any files you find.

Then WITH all Browsers CLOSED run HJT again and place checkmarks next to the following items;
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\Owner\LOCALS~1\Temp\ImInstaller\Incred iMail\incredimail_install.exe -startup -product IncrediMail
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
Once you have placed the checkmarks click the FIX button.
Exit HJT.
Reboot in SAFE MODE;
Go to C:\documents and settings\owner\local settings\temp and once in the folder click Edit> Select All. Then hit the delete key to get rid of the entire contents of the folder. Leave the folder itself intact though.
Reboot to normal mode and run a new HJT scan, save the log and post back here and I will have a few clean up steps for you.
Judy

[wayno1021]

While following your instructions, I encountered a problem uninstalling AOL. I was able to remove all of the AOL programs in the Add/Remove utility, but the "main" AOL program took forever! I sat there, watching a screen, blank except for the AOL logo and the word "Uninstalling..." for an hour and a half before I gave up. I hit Ctrl-Alt-Delete and stopped the unistall process, only to find after rebooting my computer, that it had been deleted.

I did discover, when I searched for AOL components, that I was able to delete everything except for:
AOL Companion (in Program Files) and waol (also in program files)

I ran an HJT scan, but the following entries were not in the list:

03 - Toolbar:AOL Toolbar
04 - HKLM\..\Run: [AOL Spyware Protection]
023 - Service: AOL Connectivity Service (AOL ACS)

I checked all the other items you indicated and clicked the FIX button.
Then I rebooted to SAFE MODE and emptied the contents of the following folder:
C:\documents and settings\owner\local settings\temp
I left the folder intact as instructed.

Then I rebooted to normal mode and ran a new HJT scan. The scan is attached below:

(see: HJTLog052407.txt)

Note: during this entire process, my CPU was running at 100%, even though I was not connected to the internet (I had unplugged the telephone line).
Wayne

[jholland1964]

Wayne, I don't see much in the log that I feel would be causing your problems...you say this all began 3 weeks ago, can you think of something you did, installed, uninstalled, updated, etc., three weeks ago?
By the way, turn off the Spybot S & D Tea Timer.