Lots of problems

Discussion in 'Malware Help (A Specialist Will Reply)' started by newbies13, Oct 29, 2005.

  1. newbies13

    newbies13 Private E-2

    Allrighty well long story short I have a pretty decent number of virus and anti spyware progs I use all the time. However some one was using my computer one day and the next day the world went to hell. Aim randomly closes itself and won't start back up most of the time saying "can not connect to the aim service" but then it will randomly log itself in. I thought it might just be me but I direct connected to a friend and sent him a file and it started happening to him as well.

    On top of that the computer runs slow as hell, it also won't run some programs. Mozilla for one, I double click to open it and the firefox process starts up in the task manager but I never see the browser. I can only use internet explorer now and it FREQUENTLY locks up and I have to end task on it. And again everything is just SLOOOWWWW it can take 2-3 minutes just to open a new browser window.

    I have run pandasoft, search and destroy, ad-aware, microsoft antispyware auto runs everynight, trend microskills or whatever it is and a few others. The first day I removed nearly 4000 infected files and 2-3 virus's, which seemed to help some but the problem remains. And I am starting to not find anything when I do my searches.
     

    Attached Files:

    newbies13, Oct 29, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should have followed directions in our READ & RUN ME sticky. You must install and run HJT properly from now on per: Downloading, Installing, and Running HijackThis

    I see two problem NT services in you log:
    1) I remnant of using Symantec AV which is not properly uninstalled

    2) and a trojan


    Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'. On the page that opens, scroll down to MS Software Generic Host Process for Win32 Services (or if not found look for svchost) ... then right click the entry, select 'Properties' and press 'Stop Service'. When it shows that it is stopped, next please set the 'Start-up Type' to 'Disabled'. Press 'OK' until you get back to Windows.

    Now repeat the above for:
    SymWMI Service ( or if not found look for SymWSC)

    Next, run HJT, but instead of scanning, click on the "None of the above, just start the program" button at the bottom of the choices. At the lower right, click on the 'Config" button, and then the Misc tools' button ... select 'Delete an NT Service" ... copy/paste the following into the box that opens, and press "OK":

    MS Software Generic Host Process for Win32 Services

    If that does not work try entering the short name: svchost

    Now repeat the above for:
    SymWMI Service ( or if not found look for SymWSC)

    Now exit HJT but and reboot into normal mode. Then post a new HJT log and tell me how things are working now.

    You may also want to run this: AIM Fix
     
    chaslang, Oct 29, 2005
    #2
  3. newbies13

    newbies13 Private E-2

    Ok I only ran into one problem, while using hjt to try to remove SymWSC I get an error saying that it is marked as a critical system process and can not be removed. I also tried using the aim fix and it found no virus's so it might just have to do with a diffrent problem. Also it said it would remove svchost on the next restart so I restarted, and it looks like it's still there?

    Any way I can't really tell if its acting any diffrent or not, still seems a bit slow to me. I have reposted another log.
     

    Attached Files:

    newbies13, Oct 29, 2005
    #3
  4. newbies13

    newbies13 Private E-2

    Reposting of the log, since I had to go back and install it properly for the scan.
     

    Attached Files:

    newbies13, Oct 29, 2005
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Both of those services are now gone! So the steps I gave worked okay!

    Are you still having problems?
     
    chaslang, Oct 29, 2005
    #5
  6. newbies13

    newbies13 Private E-2

    Well it hasn't made any noticable diffrence, was there anything else wrong you could see. Programs still take quite some time to start up and things like right clicking the desktop takes a good 20-30 seconds to display the properties box.

    Aim is also still randomly connecting itself and barley working, but I get the feeling that has something to do with my router.

    If there was another test or something else fishy from the log, I would say something is still wrong considering the crappy performance I am getting.
     
    newbies13, Oct 29, 2005
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Oct 29, 2005
    #7

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds