Request to analyze this log scan...

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by TidaGuy, Dec 8, 2004.

  1. TidaGuy

    TidaGuy Private E-2

    Computer SLOOOOWW...

    I know I still have the jurrasic "dial-up" PC, but my computer has been running extremely slow for over a year now. I followed all the instructions carefully in the intro page and yet, even after all the scanning, the PC continues to creep along. I seem to notice it most in my messenger service. When I start my PC, the new email takes FOREVER to completely load... even the smallest ones. Other times, during log-in, the MSN homepage doesn't load, or again, takes forever to do so. Even right now... sounds like my PC is trying to load something. Also, many times when I'm online, the 2-computer icon (bottom right of screen in toolbar) will simply disappear. I press control/alt/delete and one of the programs says something like "iasvc (not responding)". Not sure if that abbreviation is correct, but its close. Bottom line, followed directions maticulously and still have tortous-like behavior from my PC. HELP!

    MSN9 dial-up
    Pentium II 350mghz
    128 meg ram
    56K modem
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Computer SLOOOOWW...

    If you have run all the steps in < READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal > and you are still having a problem, you should read the tutorial in this Sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log file as an attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT

    Make sure you have HJT version 1.98.2 and follow the guidelines on where to install it and how to post a log as an attachment.

    Are you sure you don't have a noisy phone line problem? What rate do you connect at? Does it maintain that rate?
     
  3. IrOnMaN

    IrOnMaN Specialist

    Re: Computer SLOOOOWW...

    i dont know if this is there because i havent read the tutorial because im lazy.

    try defragging your computer.

    click start, programs, accesories, system tools, defrag.

    its takes at least an hour and a half. depends if you ever did it before.
     
  4. TidaGuy

    TidaGuy Private E-2

    Re: Computer SLOOOOWW...

    Yeah, I've defragged numerous times... there was a time before I downloaded and scanned the Spy tools that the PC wouldn't even defrag... something kept writing to it (interrupting it). Seems to defrag a little better now, but whatever it is still interrupts occasionally. As for the rate, it rarely fluctuates... steady for the most part. Just had new phone lines installed a while back and tested ok. No static.
    I'm going to download the HijackThis program as instructed and post a log file. Thanks for your help... I'll keep you updated shortly.
     
  5. TidaGuy

    TidaGuy Private E-2

    Hope this scan shows up... kept getting downloading error that attachment "in progress"...
     
  6. TidaGuy

    TidaGuy Private E-2

    alrighty... try this again.
     

    Attached Files:

  7. TidaGuy

    TidaGuy Private E-2

    I've attached files in forums before many times... what am I doing wrong?
     
  8. PhilliePhan

    PhilliePhan Guest

    Hi TidaGuy,

    Your log attached OK - I'll merge you two threads together.


    Please look in Add or Remove Programs for the following and Uninstall them if found:

    Win Tools
    Web Search Toolbar
    Win-Tools Easy Installer

    WildTangent ---> Can cause much grief

    Please print out these instructions so that you can operate with All Browser Windows CLOSED.

    Please make sure the Viewing of Hidden Files is Enabled as per the tutorial.

    Now scan with HijackThis and Check the Boxes for the following:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\TOOLBAR\TOOLBAR.DLL/sa

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - Default URLSearchHook is missing

    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe C:\PROGRA~1\WILDTA~1\APPS\CDA\CDAENG~1.DLL,cdaEngineMain ---> Suggested

    O4 - HKLM\..\RunServices: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE

    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/27e9aa23b1b653757e01/netzip/RdxIE601.cab

    O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab


    Again, make sure All Browser Windows are Closed when you Click FIX.

    Now boot into Safe Mode and navigate to and DELETE the following if they should remain:

    C:\PROGRAM FILES\TOOLBAR -->The Folder
    C:\PROGRAM FILES\WILDTANGENT -->The Folder Suggested

    NEXT:
    Run CCleaner and Spybot S&D and have Spybot fix what it finds.

    Then, as an added precaution, Go to Start > Run and type: cleanmgr. Make sure the boxes for these are checked:
    Temporary Files
    Temporary Internet Files
    Recycle Bin


    And Click OK.

    Reboot to Normal Windows and Scan with HijackThis and attach that log.
    Let me know of any problems you may have encountered with the above instructions and how your computer is running now. I will try to check back when I can.

    Best luck :)
    PP
     
  9. TidaGuy

    TidaGuy Private E-2

    Thanks for your help thus far PP. I followed your instructions completely... no problems doing so. PC still seems to be lagging... no improvement. I'll TRY to send you two scans... the first is after I rebooted in NORMAL mode offline (I have dial-up). The second is after I entered this forum and started typing in here (online). While typing, an MSN error report popped up, telling me it'll have to shut down due to an "internal problem"... and gave me the option to report it or not, which I did.

    First scan is hijackthis.log...... second scan is hijackthis3.log
     

    Attached Files:

  10. PhilliePhan

    PhilliePhan Guest

    Hi TidaGuy,

    I do not see anything in your new HJT logs that would be problematic.
    If your machine is still slow, there could be other causes - insufficient RAM, etc. . .

    The problem might also be related to some legit items like the MSN Toolbar or some of the 016 entries. Lots of avenues to pursue.

    I am just curious - Is this setting correct and wanted?
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;127.0.0.1;mail.jimandali.com;<local>

    PP
     
  11. TidaGuy

    TidaGuy Private E-2

    Can't thank you enough for your guidance Phillie.... the trick was to utilize most of the tools I downloaded from the HOW TO thread, then REBOOT. After doing this, my PC seems to be running a lot smoother. Still having a problem sometimes loading the MSN homepage when I log in, but everything else seems much more efficient. One question... in my ADD/REMOVE PROGRAMS, I have a few PC game I downloaded about 8 months ago (one was a lame BurgerKing promotional demo of a movie.... Lord of the Rings I think.... another is a Lego Racers game). When I click on ADD/REMOVE on any of these games, it does nothing... not so much as a pop up screen or an uninstall process... nothing. I've already deleted them from the PROGRAMS menu and any place else where there might be a trace of them... but can't get them out of my ADD/REMOVE list and am concerned that they're still there somehow. Any suggestions from you, or anybody for that matter, would be helpful. And again, you've been a huge help and its greatly appreciated.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds