Help Needed

yabadabado

i folks ,lookin for some advice i have a dell pc in my house that i use for the internet,itunes and a little bit of work(spreadsheets and the like) its about 5yrs old at this stage and its became extremely slow in the past few weeks.i aint got a clue about pc's so cud anyone give me advice on fixing the problems (if there r any) am pissed off with it at this stage was thinkin of just buying a new one but it a bit of a waste considering how little use this one gets.i dont even know wot the spec is on this one (mb ram and gb in the like).sorry folks if this is a really stupid thread but any help/advice much appreciated

Ruu_Old

What is the make/model of the Dell PC? Belarc PC Advisor should be able to give you some basic information on the computer. There are a few programs you can use for cleanup, CCleaner is one that can clean some junk that your PC doesn't need.

Sully

Do you use any other program to obtain music? Also, what Anti Virus program do you use? Personally dont think its past its sell by date, just needs a clean up maybe.

JuJuYNWA

When one of my computers gets slow i always do the same thing,

download Spybot, Ad Aware, Reg Mechanic, and Spywareblaster, run them all and get them to fix any errors found.

It nearly always works!!

buildabong

Save all you documents/music etc onto a CD or DVD (Backup your stuff).
Then insert your Windows CD from Dell and reinstall windows - choose the format option. (Warning this will delete everything so double check who have saved all your stuff).

Yes there are other less drastic ways to sort out your PC but the best way is to start over with a fresh copy of windows.

Unfortunately you will have to reinstall all your applications but reinstalling Windows also gets rid of all the crap!!!

Sully

The one program should do fine.. Ad Aware / Spy Bot is pretty good

Sully

buildabong wrote:

Save all you documents/music etc onto a CD or DVD (Backup your stuff).
Then insert your Windows CD from Dell and reinstall windows - choose the format option. (Warning this will delete everything so double check who have saved all your stuff).

Yes there are other less drastic ways to sort out your PC but the best way is to start over with a fresh copy of windows.

Unfortunately you will have to reinstall all your applications but reinstalling Windows also gets rid of all the crap!!!

Thats just poor advise. Thats the LAST option ANYBODY should do. Its more of a hassle in the long run doing it that way.

buildabong

Im sorry but trying to remove all that crap takes ages, and most of the time you wont get rid of everything. plus what about all the log files and temp directories that get filled up?

I ran a small PC shop a few years ago and that was the quickest and best way of sorting out a PC.

Only problem was the drivers but with the original disks from dell that should not be a problem.

Someone back me up here!!!

yabadabado

ok ppl i did wot RUU said in i looked at the belarc advisor will i post up the system info it gave me back processor and operating system.wud this help

Ruu_Old

Tut tut, reinstalling is a last option as mentioned. Far too many cowboys out there taking the easy way out (no offence intended buildabong).

yabadabado, belarc should give you how much RAM is installed.

buildabong

"time spent working out what is wrong + fixing problem" vs "rebuild"
Anyway...at least I know I am right

(No offense meant here either RUU)

yabadabado

ok folks not sure which parts are important but here goes;

Windows XP Home Edition Service Pack 2 (build 2600)

Dell Computer Corporation Dimension 2300

2.00 gigahertz Intel Pentium 48 kilobyte primary memory cache512 kilobyte secondary memory cache

41.07 Gigabytes Usable Hard Drive Capacity19.04 Gigabytes Hard Drive Free SpaceSAMSUNG CDRW/DVD SM-332B [CD-ROM drive]3.5" format removeable media [Floppy drive]Maxtor 6E040L0 [Hard drive] (41.11 GB) -- drive 0, s/n E12EHSYE, rev NAR61590, SMART Status: Healthy

Board: MiTAC International Corp. Dimension 2300 Bus Clock: 100 megahertzBIOS: Mitac Corp A02 08/26/2002

Sully

Bad practise if someone brings in a PC to get repaired and you just say "Ah sure, ill take the lazy way out. Wipe and re-install. Customer: Just reinstall all your applications.".

The PC is brought into get repaired. You should price it so that the time spent (which isnt that much if you actually know what your doing) fixing it matches the asking price.

OP: PC seems OK. I dont think that was the problem anyway. Tell you what, this should give us a lot more detail.. Download and run this: http://www.bleepingcomputer.com/files/hijackthis_sfx.php

Post back the results here.

buildabong

Ha - is what I say!!!

yabadabado posted the thread an hour ago, reinstalling just the basics (that what yabadabado uses the PC for) would probable be finished by now so HA!!!

Sully

Thats great, thanks for that buildabong. Anything else you consider useful to contribute?

yabadabado

sully i did wot u asked its massive list will i post it up?

Sully

yabadabado wrote:

sully i did wot u asked its massive list will i post it up?

Ya please.

yabadabado

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:12:12, on 26/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NewDotNet\nnrun.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/uk/enu/gen/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.search-exe.com/nph-search.cgi?tcode=exebar1&look=sbar1_srchbtn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.search-exe.com/nph-search.cgi?tcode=exesrch1&look=stmpl1&fw=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.search-exe.com/nph-search.cgi?tcode=exesrch1&look=stmpl1&fw=
R3 - URLSearchHook: WebSearch Class - {9368D063-44BE-49B9-BD14-BB9663FD38FC} - C:\Program Files\se\v11\se.DLL (file missing)
O2 - BHO: WebBho Class - {00041A26-7033-432C-94C7-6371DE343822} - C:\Program Files\se\v11\se.DLL (file missing)
O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: My &Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [DownloadWare] "C:\Program Files\DownloadWare\dw.exe" /H
O4 - HKLM\..\Run: [My Search Bar Eq] "C:\Program Files\MySearch\bar\s4bareq.exe" /r
O4 - HKLM\..\Run: [Search-Exe] "C:\Program Files\se\v11\se.EXE" /H
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - HKLM\..\Run: [NI.UWFX5_0001_LP] "C:\Documents and Settings\Martha\Local Settings\Temporary Internet Files\Content.IE5\1472SL0I\WinFixer2005ScannerInstall[1].exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.eircom.net
O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cab
O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cab
O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cab
O16 - DPF: {15D0E439-4E58-45E1-A9C1-0B1B16749A3C} - http://akamai.downloadv3.com/binaries/IA/netcmp32_EN_XP.cab
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1059_XP.cab
O16 - DPF: {1CD4E2DC-2DA0-4154-8723-38CB04FB6A58} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1062_XP.cab
O16 - DPF: {1E89F686-B78D-4C85-9EFC-3474516E3FE2} - http://directplugin.com/plugin/113097.exe
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
O16 - DPF: {26D73573-F1B3-48C9-A989-E6CE071957A1} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1057_XP.cab
O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_ASPIV4_XP.cab
O16 - DPF: {3B02AAA2-327C-40ED-A849-4BE819AE5385} (ImgSizer Control) - file://C:\Documents and Settings\Martha\Local Settings\Temp\~DlfnTmp0\imgSizer.ocx
O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_XP.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {50A28604-52F2-11D6-8F0F-5254AB11D5C2} - http://directplugin.com/dialers/109444.exe
O16 - DPF: {5F4D3335-3194-4167-85AE-E7325F2695EF} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1068_em_XP.cab
O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {78F584DF-BBF5-4296-839C-31DE60914DBC} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_ASPIV4_XP.cab
O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1061_XP.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1059_XP.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {A1C392A2-B274-46DB-89BE-1FBD476B9C93} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_XP.cab
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} (loader Class) - http://dload.ipbill.com/del/loader.cab
O16 - DPF: {AF7410C1-FBA3-415E-800A-4110CED40536} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1060_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_EN_XP.cab
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_XP.cab
O16 - DPF: {BFC9677B-8006-4336-9D49-2C797AEFCB9E} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1058_XP.cab
O16 - DPF: {C2481ED1-9896-4D49-AE90-69858DFDE446} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1073_XP.cab
O16 - DPF: {DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C} (NSUpdateLiteCtrl Class) - http://217.145.76.6/quickdl/proclaim/NSupd9x.cab
O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cab
O16 - DPF: {E1D20694-74D9-472D-AF03-08C26173A67F} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_em_XP.cab
O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cab
O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binaries/IA/netslv32_EN_XP.cab
O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1066_XP.cab
O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_XP.cab
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 14249 bytes

youcancallmeal

Advising an operating system re-install with the amount of information the OP has given is definitely not a good idea but I wouldnt go too hard on buildabong. What has happened is that the OP has described what sounds vaguely like spyware infection. Personally I once got my PC riddled with spyware and found the best way to deal with it was a full re-install of windows. I learnt my lesson and from then on I kept my PC well protected.

Also Ruu you've got the OP to install needless software when he/she could of got that info from clicking on start then run and typing in 'dxdiag'.

Anyway yabadabado I will tell you straight away there more than likely won't be quick fix for this. The best thing to allow us to help you is to give us more information such as what exactly has slowed down, e.g. internet browsing, pc start up time etc? Also have you got any antivirus like norton installed, maybe running a scan with whatever anitvirus program you've got would be a good start. And run that program sully recommended. Hijack this logs are very handy for spotting if there is spyware installed.

youcancallmeal

I'm no expert on readin hijack this logs but I can see the following which is adware:

C:\Program Files\NewDotNet\nnrun.exe description

yabadabado

forgot to say i have norton anti-virus installed.both internet browsing and pc start time have slowed and the pc often this freezes when i go to change a page or website

Sully

OK, it seems as I thought: Spyware. Also, Symnatec can slow up PCs no end, but I dont think thats the root cause. At least it protected you somewat.

Here is what I suggest:-

Download the following 2 Spyware Removal Applications
1) AdAware (See: http://www.download.com/Ad-Aware-2007-Free/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5)
Download, and update this application. Once updated, run it. It will detect whats known as spyware and give you the option to remove it.

2) SpyBot. (See: http://www.safer-networking.org/en/mirrors/index.html)
Just in case AdAware missed anything, give this program a run after.

Also, make sure that your Anti Virus is up-to-date. Once it is, do a full virus scan.

Once all scans have been completed, restart your computer.

Let us know how you get on

Sully

yabadabado wrote:

forgot to say i have norton anti-virus installed.both internet browsing and pc start time have slowed and the pc often this freezes when i go to change a page or website

Ya, the Spyware doesn't want you changing anything it has control off. Norton is doing its best to protect against it, but your PC is still riddled with Spyware.

Start-up seems OK, apart from some applications which will be removed once all scans have been run.

Personally, I would recommend moving away from Internet Explorer - or at least updating it to IE7 (if it hasn't been already) which offers greater protection.

One other suggestion, is to run Windows Update. It applies all the latest security patches which can further increase your PC protection. Go to Start -> All Programs -> Windows Update.

On a side note, while one pest of a poster has insisted you "format" your PC - this should remain the last option. Its bad practise for any IT Guy to simply "wipe clean" a PC when trouble arises.

Sure, it fixes the problem in a few minutes - but in the long run, all settings and applications have been lost. Most people don't have a backup of the application, or have important data they don't want lost.

Thus, getting this all restored from any sort of backup (which could be corrupt anyway) and then adjusting settings, updating Windows, installing all previous applications etc. will take longer then what im suggesting.

ActorSeeksJob

Don't download those two programs, they aren't very good. You have lots of spyware on your PC!


First, please open Add/Remove programs and uninstall New.Net or NewDotNet from there if listed. If it is not listed, follow these instructions:

· From a computer that has Internet access, click on the following link:
http://www.new.net/support/uninstall6_90.exe.
· Download and save uninstall6_90.exe to the Desktop.
· Go to the Desktop and double-click on uninstall6_90.exe
· Click on the OK button.
· After removal, you may be prompted to reboot. Please reboot even if not prompted.


Please run HijackThis, click "Do a system scan only" and check these entries

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R3 - URLSearchHook: WebSearch Class - {9368D063-44BE-49B9-BD14-BB9663FD38FC} - C:\Program Files\se\v11\se.DLL (file missing)
O2 - BHO: WebBho Class - {00041A26-7033-432C-94C7-6371DE343822} - C:\Program Files\se\v11\se.DLL (file missing)
O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O3 - Toolbar: My &Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O4 - HKLM\..\Run: [DownloadWare] "C:\Program Files\DownloadWare\dw.exe" /H
O4 - HKLM\..\Run: [My Search Bar Eq] "C:\Program Files\MySearch\bar\s4bareq.exe" /r
O4 - HKLM\..\Run: [Search-Exe] "C:\Program Files\se\v11\se.EXE" /H
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - HKLM\..\Run: [NI.UWFX5_0001_LP] "C:\Documents and Settings\Martha\Local Settings\Temporary Internet Files\Content.IE5\1472SL0I\WinFixer2005ScannerInstall[1].exe"
O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/ega...s4_1064_XP.cab
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binarie...SS_1063_XP.cab
O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/ega...s4_1063_XP.cab
O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binari..._ASPIV4_XP.cab
O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binari..._ASPIV4_XP.cab
O16 - DPF: {15D0E439-4E58-45E1-A9C1-0B1B16749A3C} - http://akamai.downloadv3.com/binarie...mp32_EN_XP.cab
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binarie...SS_1059_XP.cab
O16 - DPF: {1CD4E2DC-2DA0-4154-8723-38CB04FB6A58} - http://scripts.dlv4.com/binaries/ega...s4_1062_XP.cab
O16 - DPF: {1E89F686-B78D-4C85-9EFC-3474516E3FE2} - http://directplugin.com/plugin/113097.exe
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
O16 - DPF: {26D73573-F1B3-48C9-A989-E6CE071957A1} - http://akamai.downloadv3.com/binarie...SS_1057_XP.cab
O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binari..._ASPIV4_XP.cab
O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binari...SS_1070_XP.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {50A28604-52F2-11D6-8F0F-5254AB11D5C2} - http://directplugin.com/dialers/109444.exe
O16 - DPF: {5F4D3335-3194-4167-85AE-E7325F2695EF} - http://scripts.dlv4.com/binaries/ega...1068_em_XP.cab
O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binarie..._ASPIV4_XP.cab
O16 - DPF: {78F584DF-BBF5-4296-839C-31DE60914DBC} - http://scripts.downloadv3.com/binari..._ASPIV4_XP.cab
O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - http://scripts.dlv4.com/binaries/ega...s4_1061_XP.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/ega...s4_1059_XP.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binari...SS_1068_XP.cab
O16 - DPF: {A1C392A2-B274-46DB-89BE-1FBD476B9C93} - http://scripts.downloadv3.com/binari...SS_1065_XP.cab
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} (loader Class) - http://dload.ipbill.com/del/loader.cab
O16 - DPF: {AF7410C1-FBA3-415E-800A-4110CED40536} - http://scripts.dlv4.com/binaries/ega...s4_1060_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binari...vc32_EN_XP.cab
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binari...SS_1069_XP.cab
O16 - DPF: {BFC9677B-8006-4336-9D49-2C797AEFCB9E} - http://akamai.downloadv3.com/binarie...SS_1058_XP.cab
O16 - DPF: {C2481ED1-9896-4D49-AE90-69858DFDE446} - http://scripts.downloadv3.com/binari...SS_1073_XP.cab
O16 - DPF: {DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C} (NSUpdateLiteCtrl Class) - http://217.145.76.6/quickdl/proclaim/NSupd9x.cab
O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binari...SS_1066_XP.cab
O16 - DPF: {E1D20694-74D9-472D-AF03-08C26173A67F} - http://scripts.dlv4.com/binaries/ega...1063_em_XP.cab
O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binari...SS_1067_XP.cab
O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binari...SS_1072_XP.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binarie...lv32_EN_XP.cab
O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/ega...s4_1066_XP.cab
O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/ega...s4_1067_XP.cab
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe


Close all windows except for HijackThis and click "Fix checked".

Go to Start > Control Panel > Add or Remove Programs > Remove the following

se
MySearch
DownloadWare
SpySpotter3
mailskinner


Please delete these folders in bold if present

C:\Program Files\se
C:\Program Files\MySearch
C:\Program Files\DownloadWare
C:\Program Files\SpySpotter3
c:\program files\mailskinner
C:\Program Files\NewDotNet


Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only

Double-click

ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browser

Click

Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser

Click

Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


So please post a new HijackThis log in your next reply

Ruu_Old

Norton is a resource hog, I recommend uninstalling it and using a better antivirus program. AVG, avast! or Anti-Vir all have free versions which work rather well and much better than Norton.

Sully

Since when was AdAware and Spybot ruled as "not being very good"?? I would consider, and so would many, those applications very good for removing Spyware.

Personally I recommend Microsofts Spyware scanner but it just takes to long to install due to validity checks.

Also, for as long as I can remember - the "uninstall" method for Spyware never fully worked.

Also, why are you suggesting removing Cookies/History etc - so soon? Considering most spyware applications remove bad cookies and history files..

I agree with Ruu, but if your willing to pay for your Anti Virus - go with NOD32.

ActorSeeksJob

Not to be rude or anything Sully, like you said everybody is entitled to their opinion

Since when was AdAware and Spybot ruled as "not being very good"?? I would consider, and so would many, those applications very good for removing Spyware.

They have been considered "not very good" for the past 1-2 years, in particular concerning Ad-Aware. They have long ago been replaced by AVG Anti-Spyware and SUPERAntiSpyware. You will see PC experts use those programs for a scanner, and not Ad-Aware these days.

Personally I recommend Microsofts Spyware scanner

If this is Windows Defender you are referring to, then I strongly have to disagree about recommending this rather crappy program. It is terrible and most people know this.

the "uninstall" method for Spyware never fully worked.

Actually it works a lot of the time, especially for rogue anti-spyware programs like the one the user has. Granted it sometimes doesn't work, but I have already dealt with that situation as well to be safe.

Also, why are you suggesting removing Cookies/History etc - so soon?

I'm running ATF Cleaner to deal with this entry
O4 - HKLM\..\Run: [NI.UWFX5_0001_LP] "C:\Documents and Settings\Martha\Local Settings\Temporary Internet Files\Content.IE5\1472SL0I\WinFixer2005ScannerInstall[1].exe"
Removing cookies and history is definitely a good thing for this user also.

Sully

Christ times change. Thanks for those pointers, ill have to start researching again. It was only a few months ago during a course in Computer Forensics AdAware was recommended.

Also, Microsoft Defender seemed very good when it first came out. Did it go down hill?

irlrobins

ActorSeeksJob wrote:

Not to be rude or anything Sully, like you said everybody is entitled to their opinion

Indeed.

OP posts a question, people will give their advice. It's up to the OP to consider and evaluate the information given at their own risk.

Now carry on without reporting posts please.

windy bee

1. Buy more RAM, at least 1GB
2. Run adware/spybot to get rid of nasty software
3. Get rid of Norton and buy Nod instead, Norton slows down pcs so much it should be illegal
4. Put any music/videos/porn onto an external hard drive and move hem off your internal drive
5. Get rid of any p2p software

That will speed the motor up nicely.

ActorSeeksJob

It was only a few months ago during a course in Computer Forensics AdAware was recommended.

Have to say this was a pretty bad recommendation on their part. Loads of better programs to recommend, I use Dr. Web Cureit myself which is a beast. Windows Defender was never that good, and has definitely done nothing to change that(and won't in the future). Simple fact is that the best anti-spyware programs are AVG, SAS, Dr. Web Cureit. Then theres a big gap where Spybot etc are all at.

The OP had a load of malware on their PC, including a lot of dialers. It would not surprise me if they were responsible for his PC being slow.

Sorry if you thought my posts were aggressive Sully, but the word on the street these days is that the days of Ad-Aware and Spybot are over, and that's even when they released their new versions. Anyway I'd bet $5 that the users problems are due to malware after seeing his log.

Sully

OK in order to keep this on topic and to avoid the OP getting confused, ill take this further in your PM to me