Slow computer...

[PhilliePhan]

Ok, I've uploaded both of them.

Ok - At very quick glance, it looks like you have a good deal of stuff running. Judy can help you pare that down when she checks back.
-- I would also add that, if you do a lot of gaming, you might want to try an AV that is less of a resource hog than Norton.
Norton is good, but it has always been bloated.


** Your logs show a few pieces of Malware as well as some Adware. Hang in there until Judy can have a more detailed look and advise you as to what to remove.

This is what jumps out at me at first glance. Be advised that I am doing 10 things at once right now and have only given the logs a cursory glance!

O2 - BHO: (no name) - {00A6FAF1-072E-44CF-8957-5838F569A31D} - (no file)
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-C0FF-FD63B697BB35} - (no file)
O2 - BHO: (no name) - {724D43A9-0D85-11D4-9908-00400523E39A} - (no file)
O2 - BHO: (no name) - {825B3E6A-2BB3-B0CC-6363-AA5F456B43EF} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4FFB-8758-209B6AD74ACC} - (no file)
O2 - BHO: (no name) - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)

O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfat32pi.exe
O4 - HKLM\..\Run: [jelmctr] c:\windows\system32\iifqtf.exe
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe " -boot
O4 - HKLM\..\Run: [explorer] C:\WINDOWS\system32\explorer.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\6.bin\mwsoemon.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O14 - IERESET.INF: START_PAGE_URL=http://www.savewealth.com


I imagine Judy will check in as soon as she is able . . . . The week between Christmas and New Years is always hectic for Forum volunteers! --- Never mind . .. I see her!



PP

[jholland1964]

Well a quick scan of your HJT log shows me LOTS of things running you really don't want or need. Exactly the same ones that PP noted plus this one;

O4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"

Run ALL the steps on the link where you downloaded the HJT.
Follow ALL of PP's steps as given, in the order given. Then reboot and run a new HJT scan and post the log here and also for safety sake give us the AVG Anti-spy log also.

[X_Jado_X]

Will AVG mess with norton? I still want the norton on here.

[jholland1964]

The AVG listed in PP's link is not the AVG anti-virus program. It is a program to use to scan for malware/spyware/hijackers and trojans. You should only use the scanning portion do not use the background monitor portion. But even if you did use the background monitor it would not interfere with Norton.

[X_Jado_X]

It took eight hours, but I did it! lol....

Ok, I connected the internet, and the modem at the last test (the windows remover tool thing) and played xbox live for about 3 hours... I don't know if that changes anything, but anyway...

Add/Remove Programs had two things I've never seen:

SAM3
Indeo

No Malicious content was found when I ran
Microsoft® Windows® Malicious Software Removal Tool.

HJT log is attached, the Kasperspy log is a HTML format... And heres the AVG Report: (It won't let me upload, its too big)
http://files.filefront.com//;6485678;;/

[jholland1964]

As I said on your other thread, I cannot access your AVG file. I have never seen an AVG file too large to post here. If necessary, break it into smaller files but from what I see in your HJT log, we need to see this log. You have multiple infections on the computer. Did you follow instructions as given? Did you tell AVG to Quarantine or did you just run the program?

[X_Jado_X]

I'm pretty sure I told it too quarantine. But now I've uploaded it in two seperate posts.

[jholland1964]

Well I am truly dismayed to see that you are continuing to work on problems you posted in Opening NAT for xbox 360 live....
which you started 3 days after posting in this one how slow your computer was.

One of the KEY things noted at that time was how very little remaining space you had on the hard drive of this computer. Less than 10% remaining, frankly that is not enough to do much of anything but boot the computer, if you are lucky.

No wonder your AVG log was two pages long. You obviously did not follow the steps in the link I gave you one of which was to download and install the ATF-Cleaner and then run it in Safe Mode BEFORE running anything else, including the AVG program. ATF-Cleaner would have gotten rid of most of those hundreds of tracking cookies before AVG would have been tied up looking through them all. There is a reason for each step given in that link X_Jado_X and the reason is to make the next step easier.

Now looking at your AVG log shows that all items WERE Quarantined.
There are a few more steps you need to take;

First of all go to Start, Control Panel, Add/Remove and look for the following programs;
PAL SPYREM
MyWebSearch
IF they are listed in Add/Remove then Uninstall BOTH.
You may also want to uninstall any of the following items associated with FunWebProducts.

• My Web Search (Smiley Central or FWP product as applicable)
• My Way Speedbar (Smiley Central or other FWP as applicable)
• My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
• My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
• Search Assistant - My Way

If none of the above are listed there don't worry about it, just close out the Add/Remove and Control Panel.
Open My Computer. Double Click on "C" drive.
Navigate to C:\Program Files
First look for the folder MyWebSearch. If you find it, delete it.
Then look for the folder FunWebProducts. If you find it, delete it.
Then look for the folder PAL SPYREM and if you find it, delete it.
Then go to Start, Search, Files and Folders and do a search on "C" drive for PAL SPYREM. If any are found, delete them.
Then search for MyWebSearch and delete any found.
Then search for FunWebProducts and delete any found.

Reboot the computer.
Next run HiJackThis and place checkmarks next to any of the following remaining;

O2 - BHO: (no name) - {00A6FAF1-072E-44CF-8957-5838F569A31D} - (no file)
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-C0FF-FD63B697BB35} - (no file)
O2 - BHO: (no name) - {724D43A9-0D85-11D4-9908-00400523E39A} - (no file)
O2 - BHO: (no name) - {825B3E6A-2BB3-B0CC-6363-AA5F456B43EF} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4FFB-8758-209B6AD74ACC} - (no file)
O2 - BHO: (no name) - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)

O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfat32pi.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [jelmctr] c:\windows\system32\iifqtf.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\6.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\6.bin\mwsoemon.exe
Once you have placed the checkmarks then click the FIX button.

Exit HJT.

Next again go to My Computer, "C" drive.

Navigate to;
C:\WINDOWS\system32\

In system32 look for the following files noted here in red and delete them;
defragfat32pi.exe
iifqtf.exe

Reboot the computer.

Run one more AVG scan, clean all that is found.
Save the log.

Run one more HJT scan. Save the log.

Post back here with both logs.

[X_Jado_X]

Ok, I followed ALL STEPS EXACTLY AS IT SAID. It took 8 hours! If somehow you think I didn't follow the steps, then something is wrong with those steps because I did it exactly. I am going to do what you said above, now.

[X_Jado_X]

Well I am truly dismayed to see that you are continuing to work on problems you posted in Opening NAT for xbox 360 live....
which you started 3 days after posting in this one how slow your computer was.

One of the KEY things noted at that time was how very little remaining space you had on the hard drive of this computer. Less than 10% remaining, frankly that is not enough to do much of anything but boot the computer, if you are lucky.

No wonder your AVG log was two pages long. You obviously did not follow the steps in the link I gave you one of which was to download and install the ATF-Cleaner and then run it in Safe Mode BEFORE running anything else, including the AVG program. ATF-Cleaner would have gotten rid of most of those hundreds of tracking cookies before AVG would have been tied up looking through them all. There is a reason for each step given in that link X_Jado_X and the reason is to make the next step easier.

Now looking at your AVG log shows that all items WERE Quarantined.
There are a few more steps you need to take;

First of all go to Start, Control Panel, Add/Remove and look for the following programs;
PAL SPYREM
MyWebSearch
IF they are listed in Add/Remove then Uninstall BOTH.
You may also want to uninstall any of the following items associated with FunWebProducts.

• My Web Search (Smiley Central or FWP product as applicable)
• My Way Speedbar (Smiley Central or other FWP as applicable)
• My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
• My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
• Search Assistant - My Way

If none of the above are listed there don't worry about it, just close out the Add/Remove and Control Panel.
Open My Computer. Double Click on "C" drive.
Navigate to C:\Program Files
First look for the folder MyWebSearch. If you find it, delete it.
Then look for the folder FunWebProducts. If you find it, delete it.
Then look for the folder PAL SPYREM and if you find it, delete it.
Then go to Start, Search, Files and Folders and do a search on "C" drive for PAL SPYREM. If any are found, delete them.
Then search for MyWebSearch and delete any found.
Then search for FunWebProducts and delete any found.

Reboot the computer.
Next run HiJackThis and place checkmarks next to any of the following remaining;

O2 - BHO: (no name) - {00A6FAF1-072E-44CF-8957-5838F569A31D} - (no file)
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-C0FF-FD63B697BB35} - (no file)
O2 - BHO: (no name) - {724D43A9-0D85-11D4-9908-00400523E39A} - (no file)
O2 - BHO: (no name) - {825B3E6A-2BB3-B0CC-6363-AA5F456B43EF} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4FFB-8758-209B6AD74ACC} - (no file)
O2 - BHO: (no name) - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)

O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfat32pi.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [jelmctr] c:\windows\system32\iifqtf.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\6.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\6.bin\mwsoemon.exe
Once you have placed the checkmarks then click the FIX button.

Exit HJT.

Next again go to My Computer, "C" drive.

Navigate to;
C:\WINDOWS\system32\

In system32 look for the following files noted here in red and delete them;
defragfat32pi.exe
iifqtf.exe

Reboot the computer.

Run one more AVG scan, clean all that is found.
Save the log.

Run one more HJT scan. Save the log.

Post back here with both logs.

I couldn't find any of these:

PAL SPYREM
MyWebSearch
defragfat32pi.exe
iifqtf.exe