Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 21

Thread: Very odd problem

  1. #11
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    I am going to be perfectly honest here, I do feel at a disadvantage, I have not seen the full logs, I don't really know what all you have fixed prior to posting and I don't know what the files found by Kaspersky were infected with and how you fixed those you fixed. The odd O10 listing has me concerned because as unless you were infected twice there is no reason you should have had to run the LSPFix twice and that entry should not be there. Depending on the infection some need a special tool to completely fix. I am a bit leery to offer advice for fear it will conflict with something you have all ready done or cause problems with some files which may have been left behind during the fixes.

  2. #12
    Join Date
    Aug 2007
    Posts
    10
    Alright, for some reason whenever I try to save the Rootkit Revealer log file, the file turns out to be a blank .txt file. I've already tried re-scanning and re-saving, but it doesn't seem to work.

    I did, however, take a screenshot of it...hope that helps. I had to put it in a zip archive because the max size for .jpg images is only 800x600, and my desktop resolution is 1280x1024.

    Let me know if there's anything else you need.
    Attached Files Attached Files

  3. #13
    Join Date
    Aug 2007
    Posts
    10
    I have to admit that it is quite odd that the O10 entry remains...I remember fixing that same problem on another computer, and the entry disappeared.

  4. #14
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Nuck, since you had such an odd problem with the Rootkit Revealer how about trying another anti-rootkit program
    AVG Anti-Rootkit

  5. #15
    Join Date
    Aug 2006
    Location
    255.255.255.666
    Posts
    2,056
    I edited the screenshot to show only the entries that I found suspicious but of course they may not be malware related, it is hard to tell by looking at a screenshot, I often need to dig further into the registry to confirm and take action so I suggest you use another Rootkit scanner such as the one Jholland suggested, a few other programs I'd like you to try using and saving the log files of the ones I mention:

    RootKit Hook Analyzer
    SS-Keylogger Clean

    You won't really need a log file saved for the above two, just download and run them.
    Rootkit Hook Analyzer in Safe Mode and the KeyLogger in the Normal mode. When running a KeyLog Scanner, I often run a browser and write and e-mail etc. to mimic keyboard typing to provoke to a dormant keylogger that may otherwise be missed by the scanner.

    Last but not least, I would like you to d/l and run a scan with Autoruns, then save a log file (not a screenshot please) following the instructions on this post. The post has the download link as well.
    Attached Images Attached Images

  6. #16
    Join Date
    Aug 2007
    Posts
    10
    After running all your mentioned programs...

    The AVG Anti-Rootkit detected nothing.

    The RootKit Hook Analyzer detected 15 hooks. I apologize once again for having to save the log as a screenshot, because I was unable to save it as a .txt or .log file for some reason.

    The SS-Keylogger clean detected nothing.

    I was able to save the Autoruns log file as a .txt file, so that's included in the attachments.

    Thanks, I appreciate all your help so far.
    Attached Images Attached Images
    Attached Files Attached Files

  7. #17
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Did you do a search for that "not valid any more" LSP 25,5g entry as ~TL suggested? Have never seen anything like that before, you really need to do the search as requested in post #5 and give us the results of that.

  8. #18
    Join Date
    Aug 2007
    Posts
    10
    Is it the search parameter "25,5g"? I tried a search for that in regedit, but didn't find anything.

  9. #19
    Join Date
    Aug 2006
    Location
    255.255.255.666
    Posts
    2,056
    All the scans came up clean and Autoruns looks OK for the most part (I will add my personal comments at the end) so I don't believe your system has a malicious infection at this time. I believe it has to do more with either a problem with the operating system or more so a Hardware issue since you made this statement in your first post:

    There was nothing wrong before I shut it down a week ago, then the problem started immediately happening when I turned it on again.
    Possibly an electric spike/surge could have made some damage with the mobo or even the PSU enough to cause abnormalities even though the damage part still runs at least for a certain time before acting up.

    Then again, the OS might have been damaged due a nasty jolt the HD had taken...of course these are all valid possibilities but I can't say for certain with this much info and not much troubleshooting.

    On a more practical and logical approach, I would look into the services/process running in the background. You mentioned nothing over 30% or no CPU hogs which is fine but this still wouldn't mean everything is peachy.

    Also occasional slowness is with the entire system or just network/Internet based programs? That could help you isolate the culprit easier.

    On the hardware side, when the slowness occurs, make sure all the fans are working (the CPU heatsink fan/ PSU fan in the back), no excessive heat or also sounds coming from the case. Possibly damaged or faulty components: HardDrive, RAM and/or PSU. If overheating is the reason, the problems you experience should occur after having the system on for similar amount of time but if it is due to a faulty component, it'd be hard to find a pattern.

    The below is my rundown on the autoruns log but like I said nothing that could be the cause as far as I can see (I skipped the entries that are unnecessary since this purpose of this log was to spot possible invalid entries):

    Pretty common, I would at least disable it by unchecking the box, or delete it either action is fine, your call:
    HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
    + 0 File not found: About:Home
    Pretty common, I would at least disable it by unchecking the box, or delete it either action is fine, your call:
    HKLM\Software\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved
    + Display Panning CPL Extension File not found: deskpan.dll
    I'd suggest deleting this one:
    Task Scheduler
    + MP Scheduled Quick Scan.job File not found: Files\Microsoft
    Again, unlikely that any of the above was the cause but better to clean them up.

  10. #20
    Join Date
    Aug 2007
    Posts
    10
    CPU, HD, and Mobo temperatures are at normal levels...fans work fine...PSU voltage levels are stable.

    It's unlikely that a power surge is the cause of the problem, since they hardly ever occur where I live, and even if they do, my PC is connected to a surge protector.

    Occasionaly slowness seems to occur with the entire system - the symptoms are easy to spot: the mouse cursor does not move smoothly, and sound is often quite choppy. Also, some programs take an especially long time to load.

    Could it be possible that the problem is program driver-related? I do recall my Sygate Firewall crashing on startup (after the desktop loaded), although this occurred on the second reboot after the program started.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •