Please help. I have installed tools, run scans...still have problems.

Discussion in 'Malware Help (A Specialist Will Reply)' started by totalconfusion, Mar 20, 2008.

  1. totalconfusion

    totalconfusion Private E-2

    Notebook Sony Vaio VGN-SZ430N
    Microsoft Windows Vista Business Version 6.0
    Intel Core 2 CPU T7200 @ 2.00GHz 2.00GHz
    RAM 2046 MB
    32-bit

    I am not sure what is wrong. Running on Windows Vista Business, have never liked it and it has gradually declined in performance. Last week I downloaded NVU and was also using Gimp and Yahoo Site Builder (not all at the same time) when the computer froze. This happened everytime that I used Gimp.

    After that I noticed in the task manager that my amount of free physical memory was "0". When I restarted my computer (and everytime since) I started closing some programs to hopefully free up some space but the programs kept opening on their own. After 3 attempts to close them they finally stayed closed.

    I have completed the following:

    Basic computer maintenance everyone should do ~ including deleting some programs that I do use on a regular basis.

    READ & RUN ME FIRST Before Asking for Support

    Vista Cleaning Procedure

    Now attaching the logs.

    Computer seems to still have the same problem.

    I am also having problems with my desktop computer (XP) on this network and an external hard drive and wondering if they are related.

    I will make a separate post about my desktop.

    Thank you.
     

    Attached Files:

    totalconfusion, Mar 20, 2008
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm sorry but your problems are not related to malware. You should try posting in the Software Forum and reference this thread where people can see your logs which will show them all the applications you have installed and running. You may want to look into uninstalling Spotmau WinCare 2008 to see what impact it has. I noticed you had it on the other PC which is also having problems.

    You do however need to do the below to remove a stuck service from Symantec.
    • Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
    • On the page that opens, scroll down to Symantec Lic NetConnect service
    • then right click the entry, select Properties and press Stop Service.
    • When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
    • Click OK until you get back to Windows.
    • Next, run C:\MGtools\analyse.exe which is really HijackThis, but instead of scanning, click on the None of the above, just start the program button at the bottom of the choices.
    • At the lower right, click on the Config button
    • Then click the Misc tools button
    • Select Delete an NT Service
    • Copy/pasteCLTNetCnService into the box that opens, and press OK
    • If you receive any error messages just ignore them and continue.
    • Now exit HJT but and reboot when it tells you it needs to.
    You can now also do the below to cleanup from running the READ ME.

    1. Uninstall SUPERAntispyware
    2. If we used ComboFix then UNINSTALL COMBOFIX (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN
      • Now type combofix /u in the runbox and click OK.
      • Note: The space between the X and the /U, it must be there.
    3. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    4. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
     
    chaslang, Mar 21, 2008
    #2
  3. totalconfusion

    totalconfusion Private E-2

    Thank you for helping me.

    I tried to remove the stuck service from Symantec as you instructed. It was already stopped but I disabled it and followed your instructions to run MGtools. When I pasted CLTNetCnService in the box and pressed ok I got the following:

    The following service was found:
    Short name: CLTNetCNService
    Full name: Symantec Lic NetConnect service
    File: C:\Program Files\Common Files\Symantec
    Shared\ccSvcHst.exe (file missing)
    Owner: Unknown owner

    Are you absolutely sure you want to delete this service?

    I clicked yes and then got this message:

    Unable to delete the service 'CLTNetCnService'. Make sure the name is correct and the service is not running.

    I looked at services in the task manager and it is still there and listed as disabled. I rebooted did the whole thing again and it still remains.

    I uninstalled Spotmau but am now curious...are there known problems with having Spotmau on your system?

    Nobody has responded to my post about my other PC. Did I post that one in the wrong place also?

    Thanks again :)
     
    totalconfusion, Mar 21, 2008
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    Try using the below and see if it gets removed.

    Norton Removal Tool (SymNRT)

    I don't know as I don't use it. I was just stating that you use it on both PCs (it also seemed to be install recently) and you are complaing of both PCs being slow. Did uninstalling it change anything?


    No! It just takes time as we work thru all of the posts from oldest to newest. See the below sticky which explains this method I'm not saying you bumped, I'm just saying read it for informational purposes.

    Don't Bump! It Only Hurts You!!!
     
    chaslang, Mar 21, 2008
    #4
  5. totalconfusion

    totalconfusion Private E-2

    The Norton removal tool worked. :)

    Unfortunately uninstalling Spotmau doesn't seem to have made a difference.

    I do understand....and very much appreciate that this is a free service and it we all have to be patient. Honestly, I wasn't complaining...just wanted to make sure that I didn't put the post about my other computer in the wrong place. I am extremely grateful that you all are here to help!...and thank you for helping me with that other computer too!

    Big Hugs to you!
     
    totalconfusion, Mar 21, 2008
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    Okay! Then perhaps it is related to other things that are installed. Please answer the same questions posted in your other thread for the problems on this PC.


    Also try uninstalling Ad-Aware 2007 and Spybot and tell me what effect this has if any.

    Also how much of an effect does CarboniteService have on your PC as it is always running and so is Protector Suite QL.
     
    chaslang, Mar 21, 2008
    #6
  7. totalconfusion

    totalconfusion Private E-2

    Okay! Then perhaps it is related to other things that are installed. Please answer the same questions posted in your other thread for the problems on this PC.


    Also try uninstalling Ad-Aware 2007 and Spybot and tell me what effect this has if any.
    I have uninstalled these and don't see a difference.

    Also how much of an effect does CarboniteService have on your PC as it is always running and so is Protector Suite QL.
    It doesn't seem to have any effect. I went ahead and disabled it but am not noticing a difference. I only installed it a few days ago to back up my data, so it was not part of the original problem.



    What exactly is slow?

    What I mean is that I will get an error saying that a program that I am trying to run is not responding...if I wait long enough it will respond...eventually.

    All operations?
    Some of it has gotten better but when loading some programs like gimp.

    Boot Up?
    Yes, it seems like the computer is loading more than it used to.

    Shut down?
    It shuts down pretty quickly.

    Surfing/downloading?
    Surfing was becoming a big problem but that seems to have improved.

    Is it also slow in safe boot mode?
    Things are running a bit faster in safe mode.

    This is another thing that I find interesting...after booting I open the Task Manager and there are 61 processes running. Only 18 of them are showing. When I click on the "Users" tab there is only one user listed. When I click on "Show processes from all users" the rest of those processes show up on the list.

    The same thing is happening in safe mode, one user with 23 processes running...only 5 of them showing until I click on "Show processes from all users".

    Does that mean that there is another user running that is hidden?
     
    totalconfusion, Mar 24, 2008
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This kind of behavior is rarely related to malware. And since your logs show no malware, I would assume this is true for you too.

    If you install programs that require things to load at startup, then boot time will take longer.

    Thus again as mentioned in your other thread, see if you can isolated which software/drivers/services are the cause of your slow performance by using MSconfig to control what loads. Remember this is only for temporary debugging not for a long term solution.

    This is just the way Vista works. It is hiding the processes related to the System (the Windows OS) from you until you click all users. The System is considered a user. On my Vista PC about 13 processes show until I click all users and then 45 show.


    We can try running the below rootkit scan just to be on the safe side but I'm not expecting it to find anything:

    AVG Anti-Rootkit

    Attach a log from it if it finds anything. You can run this on your other PC too just to be safe.
     
    chaslang, Mar 25, 2008
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds