something is wrong

Hi and Welcome


Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

also note that you should also disable Spybot - Search & Destroy's TeaTimer as that can hinder any removal process.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis


When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

• Bitdefender
• Panda Scan
• HijackThis

Are you experiencing any malware issues, popups, browser hijack etc?

When the PC was re-installed, were all the drivers updated/installed, eg. Chipset Motherboard, Graphics Card, if your mouse has its own driver was that installed, some wireless and USB mice have specific drivers ( especially Logitech ) etc?

Is it a desktop or laptop?

Have you defragged since the new install?

 

If you attach the logs requested in the guide you have mentioned you completed the steps from and we can see if their is anything else that could be causing this due to malware.

I had 4 questions at the bottom you have not answered?

 

Why didn't you attach the Bitdefender log that was requested?

You HJT log shows no malware. You can delee the below which Panda found:

C:\Program Files\Common Files\Totem Shared <--- the whole folder
C:\temp\salm.log
Other than that you are clean based on the logs you have attached. Let's see if the below scans show us anything.

Now run the below procedure and attach the runkeys.txt log.

• Using GetRunKey

Now run the below procedure and attach the newfiles.txt log.

• Using ShowNew

Please download & run Blacklight Beta

• Hit I accept. It will take you to download page.
• Download blbeta.exe and save it to the Desktop.
• Once saved... double click blbeta.exe to install the program.
• Click accept agreement and Click scan
  This app too may fire off a warning from antivirus. Let the driver load.
  Wait for it to finish.
• If it displays any items...don't do anything with them yet. Just hit exit (close)
• It will drop a log on Desktop that starts with fsbl....big number

Please attach the Blacklight log file.

 

GetRunKey.bat takes about 3 seconds.

And ShowNew could be similar or slightly longer if you have a lot of new files to add to a list.

Run them again and make sure you extracted ALL the files from the ZIP file and not just the .bat file.

If they are not running, you could have problems with missing files in your OS. If you still don't get a long within a few seconds, do the below and then try to get the logs:

Choose the file below appropriate for your Windows Version:

For Windows XP Pro: download and run XPproFix
For Windows XP Home: download and run XPHomeFix

 

All of your logs are all pretty clean but I will give you a registry patch to run below.

Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

Now reboot and look for the below files and delete them if found:
C:\windows\system32\narrator.exe
c:\windows\narrator.exe


If your PC is still running slow, I would recommended looking elsewhere (like what you are running) because it does not appear to be malware. Start with McAfee!