Another PC problem

ONEEYEMAN · Oct 25, 2006

Hi, ALL,
This is another PC I am managing (my father's). So I am starting a new thread...
Symptoms:
Boot-up process is too slow. It takes 5-7 min. before I can start operate (run programs, take control of keyboard, etc).
I did the "READ & RUN ME FIRST" to the best of my and this PC ability.
This is what happened:

CCleaner ran for both accounts and cleaned the PC.
Spybot ran for both accounts and cleaned the PC.
Windows defender ran for both accounts (full scan) and didn't find anything.
Bitdefender didn't run at all. Said that: "There is a Service Pack 2 detected. Can't run"
PandaActiveScan didn't run. IE didn't open the site.

Now there are the logs from the 3 last items.
Please review and reply.

Thank you.

chaslang · Oct 26, 2006

While you have a few things to fix, they are not malware. And your problems with slow startup are also not malware. Your problem is more than likely due to the Symantec software you have installed.

You should have uninstall this: Java 2 Runtime Environment, SE v1.4.2_03" while running the READ ME and you should have updated to the current Sun Java version as requested in the section where the online scans were to be run.

You also should have uninstalled Viewpoint Media Player in step 0 of the READ ME. So uninstall it now.

Now run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - ~EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
The next two O4 lines are not malware but they are not required and waste system resources.
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab

After clicking Fix, exit HJT.

Other than that, you will have to bite the bullet and see what happens when you uninstall ALL of the Symantec software and replace it with an AV and firewall from the below link:

How to Protect yourself from malware!

Log in or Sign up

Another PC problem

ONEEYEMAN Corporal

Attached Files:

runkeys.txt

newfiles.txt

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member