hi all,
im having alot of problems with my pc it is very very slow taking ages to get to start page then crashes as soon as it does most programs not responding i have looked at posts by other members but am still at a loss as to what to do.
Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please
Reg Entries that were deleted
...
Microsoft (R) Windows Script Host Version 5.6
Random Runs removed from HKLM
...
PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»» Searching by size/names...
»»»»»
Search five digit cs, dm and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal
Other suspects.
Directory of C:\windows\system32
»»»»» Misc files.
»»»»» Checking for older varients covered by the Rem3 tool.
HJTLogfile of HijackThis v1.99.1
Scan saved at 1:34:23 PM, on 11/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\windows\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\windows\System32\PAStiSvc.exe
C:\windows\System32\svchost.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Common Files\AOL\1133799830\ee\AOLSoftware.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Instant Messenger Names\IM-svr.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
c:\program files\common files\aol\1133799830\ee\services\antiSpywareApp\ve r2_0_31_1\AOLSP Scheduler.exe
c:\program files\common files\aol\1133799830\ee\aolsoftware.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Common Files\AOL\aoltpspd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\windows\system32\svchost.exe
C:\Documents and Settings\belinda\Local Settings\Temporary Internet Files\Content.IE5\096305A7\hijackthis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F1 - win.ini: run=C:\WESTWOOD\REDALERT\INSTICON.EXE C:\WESTWOOD\REDALERT\INSTICON.EXE
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1D4C7057-EAD2-44C6-AD18-9092905F28F1} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {590FFB84-6A29-4797-9C0E-B15DF2C4CDCB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9125F250-EB4F-49fe-AE17-C17665873A5C} - (no file)
O2 - BHO: (no name) - {a62d2213-2d9b-4d25-b52d-0bc282501d5b} - (no file)
O2 - BHO: (no name) - {A97B5EF1-CA64-466F-AC40-F770ED52DB92} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {FE6C16C4-16AD-47B6-B250-26AD1829E49A} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1133799830\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [IMprocess] C:\Program Files\Instant Messenger Names\IM-svr.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\RunServices: [WindowsRegKey upd4te2d4te] kriqncdzr.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?65588cad5f7a4b4ea83e2a4a912496a4
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?65588cad5f7a4b4ea83e2a4a912496a4
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) -
http://zone.msn.com/binFrameWork/v10...I.cab46479.cab
O16 - DPF: {1230CB21-C88D-11CF-0000-000000000000} -
http://www.browserupdate.co.uk/cabs/...9/ukiq0029.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) -
http://zone.msn.com/BinFrameWork/v10...y.cab32846.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} -
http://www.reflexive.net/rlwweb/Refl...GameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) -
http://aolcc.aolsvc.aol.co.uk/comput...up/qdiagcc.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) -
http://zone.msn.com/binframework/v10...t.cab32846.cab
O16 - DPF: {590FFB84-6A29-4797-9C0E-B15DF2C4CDCB} -
http://www.googlecaches.com/install/tload.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.co...?1101858801764
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) -
http://launch.gamespyarcade.com/soft...ch/alaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} -
http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) -
http://zone.msn.com/bingame/zpagames...e.cab50108.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://cdn.messenger.msn.com/downloa...Downloader.cab
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} -
http://download.cdn.winsoftware.com/...reeInstall.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://cdn2.zone.msn.com/binFramewor...o.cab34246.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} -
http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) -
http://www.msngamecentre.co.uk/onlin...utLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} -
http://zone.msn.com/bingame/shpo/default/shapo.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) -
http://zone.msn.com/binframework/v10...y.cab41227.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://msnuk.oberon-media.com/online...ploader_v5.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} -
http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} -
http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) -
http://messenger.zone.msn.com/binary...n.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2184FC2C-C8F1-4F28-A9EC-0FE3A7779559}: NameServer = 205.188.146.145
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\windows\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: STI Simulator - Unknown owner - C:\windows\System32\PAStiSvc.exe
-------------------------------------------------------
OS Information:
PropertyValue
OS Name Microsoft Windows XP Home Edition|C:\windows|\Device\Harddisk0\Partition1
Service Pack 2.0
OS Manufacturer Microsoft Corporation
Windows Directory C:\windows
Processor:
PropertyValue
Current Clock Speed 1048
Description x86 Family 6 Model 8 Stepping 10
Manufacturer GenuineIntel
Name Intel Celeron processor
Memory (RAM):
PropertyValue
Bank Label
Capacity 268435456
Bank Label
Capacity 134217728
Total Memory Deteced in Hardware: ~384 MB
Memory Reported to Operating System: 382MB
Disk Drives:
PropertyValue
Description Disk drive
Manufacturer (Standard disk drives)
Model SAMSUNG SV2042H
Media Type Fixed hard disk media
Size 20406919680 (~19 GB)
Number of Partitions 1
Installed Printers:
PropertyValue
Name Lexmark X1100 Series
Port Name USB001
Default True
Driver Name Lexmark X1100 Series
Motherboard:
PropertyValue
Manufacturer ASUSTeK Computer INC.
Model
Name Base Board
Part Number
Product TUWE-M
Serial Number xxxxxxxxxxx
Version REV 1.xx
BIOS:
PropertyValue
Manufacturer Award Software, Inc.
Name Award Medallion BIOS v6.0
Release Date 20011108000000.000000+000
Version ASUS - 30303031
Monitor:
PropertyValue
Description Plug and Play Monitor
Name Plug and Play Monitor
Screen Height 768
Screen Width 1024
Keyboard:
PropertyValue
Description Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Pointing Device:
PropertyValue
Manufacturer Microsoft
Name PS/2 Compatible Mouse
Sound Card:
PropertyValue
Manufacturer Microsoft
Description Unimodem Half-Duplex Audio Device
Device ID MODEMWAVE\0\{8CC53087-3A8C-430D-9537-45A244C1E0D4}
Manufacturer Avance
Description Avance AC97 Audio
Device ID PCI\VEN_8086&DEV_2445&SUBSYS_80721043&REV_05\3&61A AA01&0&FD
Video Card:
PropertyValue
Adapter Compatibility Intel Corporation
Adapter RAM 4194304
Description Intel(R) 82810E Graphics Controller
Installed Display Drivers i81xdnt5.dll
Driver Version 6.13.01.2951
Driver Date 10/30/2001 12:00:44 PM
Video Mode Description 1024 x 768 x 65536 colors
DirectX Installation:
PropertyValue
Version 6.03.01.0148
Modem:
PropertyValue
Model MSP3885-E 56K PCI Modem
Name MSP3885-E 56K PCI Modem
Model Standard 56000 bps Modem
Name Standard 56000 bps Modem
Network Adapters:
PropertyValue
Description WAN (PPP/SLIP) Interface
Description Packet Scheduler Miniport
Description WAN Miniport (IPX)
Description Realtek RTL8139/810x Family Fast Ethernet NIC - Packet Scheduler Miniport
Description Packet Scheduler Miniport
Description Microsoft TV/Video Connection
Description WAN Miniport (ATW)
External Ports:
PropertyValue
External Reference Designator
External Reference Designator
External Reference Designator
External Reference Designator USB1
External Reference Designator USB2
External Reference Designator USB3
External Reference Designator USB4
External Reference Designator PS/2 Keybaord
External Reference Designator PS/2 Mouse
External Reference Designator Parallel Port
External Reference Designator Serial Port 1
External Reference Designator Serial Port 2
External Reference Designator Joystick Port
External Reference Designator MIDI Port
External Reference Designator Line In Jack
External Reference Designator Video Port
Expansion Slots:
PropertyValue
Slot Designation PCI 1
Slot Designation PCI 2
Slot Designation PCI 3
-------------------------------------------------------
hope this is all you need thanks in advance for anyone who can help
leigh