last desktop, slow--especially booting up

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by tatsall, Mar 25, 2006.

  1. tatsall

    tatsall Private E-2

    You are probably getting tired of seeing my user name. I can't tell you how much I appreciate the help you've given me to get our family's computers working more efficiently. This is the last desktop (a laptop still to go).

    This one is a Dell running Windows XP Home with Service Pack 2. It runs slow, especially booting up and opening programs.

    I've completed steps 1-7.

    These were run in Safe Mode:
    CC Cleaner
    Microsoft Malware... found nothing
    Ad-Aware had 1 negligible object which I removed
    Spy-Bot fixed 6 problems
    Defender's full scan found nothing
    CW Shredder and Kill2Me found nothing
    Bitdefender found nothing

    PandaActiveScan would not allow me to have the report in safe mode so I rand it again in Normal mode. The log is attached.

    Everything is still running the same so far.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Make sure viewing of hidden files is enabled (per the tutorial).

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    The below are not malware but can be fix to help speed things up. They are not needed!
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -

    After clicking Fix, exit HJT.

    Now we need to Reset Web Settings:
    1. If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
    2. Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
    3. If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.
    Now reboot in normal mode and post a new HJT log.

    Make sure you tell me how things are working now.

    Reminder Note: Once we have determined you are malware free you will need to disable System Restore, reboot, and re-enable system restore per step 1 of the READ & RUN ME. This only applies to if using WinXP or WinMe.
     
  3. tatsall

    tatsall Private E-2

    Boot up is still very slow. After the Windows desktop is visible, it still seems to take a very long time to finish up so you can do anything. Programs like Firefox are still slow to open with a loaded page.

    I know this computer doesn't have the speed of our others, but we remember it being faster when we first got it.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Everything I asked you to fix in my last message is still there. You did not fix anything.

    Try again and then check your log yourself to make sure it got fixed before posting another one. If it does not fix, make sure you shut down Windows Defender before trying to fix. And then make sure you accept the changes if and when Windows Defender warns you about the changed when your reactivate it or at reboot.
     
  5. tatsall

    tatsall Private E-2

    I don't understand why HJT didn't overwrite the previous log. I'm assume it is user error. When I ran HJT again, I found only one item that was not removed the first time. I exited Win Defender and removed:

    04 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe"

    I rebooted, ran HJT and double checked the log to verify that all items you suggested have been removed. The new log is attached.

    This has speeded the booting of the computer some. If you believe it's now clean, I'll fix System Restore and do Malware Prevention as per your Read Me instructions.
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes! You are clean! If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

    After that, you should work thru the below link:

    How to Protect yourself from malware!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds