Slow System Recovery

The other day, my system started slowing down to the point where it took almost a good minute to even open up windows explorer. I went through and followed the prerequisites to a T before I even attempted to attach my HJT log. There are a few suspicious things on there (ie Power Reg in startup?). Could someone please review and offer suggestions. Thanks in advance.

 

Please allow me a moment to analyze your log

Are you familiar with TivoTransfer & WildTangent ??

 

Yes. That is the new application so that you can transfer Tivo programs across your home network and burn to DVD!!!

 

Do you use WildTangent ?

 

Ad-aware of Spybot removed the Wild Tanget, but on reboot I get the "Cannot find file" (looking for the cda... .dll).

 

Please look in Add or Remove Programs for the following and Uninstall them if found:

WildTangent

Preview AdService

Please print out these instructions so that you can operate with All Browser Windows CLOSED.

Please make sure System Restore is OFF and the Viewing of Hidden Files & Folders is Enabled as per the tutorial.


Do another scan with HijackThis and Check the Boxes for the following:

Make sure All Browser Windows are Closed when you Click FIX.

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm

O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe
O4 - Startup: PowerReg Scheduler V3.exe

O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://www.streamaudio.com/download/ccpm_0237.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab


Again, make sure All Browser Windows are Closed when you Click FIX.


NOW:
Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:


C:\Program Files\WildTangent ←–– Delete this whole folder if it exist!

C:\Program Files\Preview AdService ←–– Delete this whole folder if it exist!


NEXT:
Run CCleaner


Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.


Reboot to Normal Windows , Scan with HijackThis and attach the new log.
Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.

Good Luck!

 

Done. I also changed the homepage of IE to Major Geeks b/c everytime I would launch IE I with Google as the homepage, I would get a "page loaded but with errors" in the status bar. But now that is gone. Here is the new log.

 

Log is clean! Are you currently experiencing any problems?


FINAL STEP

Reset Web Settings & Default Security Settings:


To Reset Web Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


To Default Security Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.

 

No system problems! Everything seems to be good! Thanks for helping a fellow Alabamian!

 

Your Welcome!

You should see this article on How to Protect yourself from malware!