Vizy93

Ok i reinstalled my os, reformatted and stuff a week ago because my comp wasnt booting up. and for about 5-6 days, i was using the comp without any security software installed. my soundcard in sig is what i use as my sound device. My sound is coming all wierd and watery and my speakers start to crackle. this happens many,many,many times. It happened before. but i just reinstalled the drivers and everything was fixed.

not this time though. i did a scan: AVG found nothing. Im also getting wayyyyy slower bootups then before. now on the xp loading screen, nmy comp stays here for atleast 10-11 seconds. it used to be 3-5 last time. i posted a HJT log. thnx guys.

LOG:
----------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:55:36 PM, on 3/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupda...5035/CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 5552 bytes

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

Vizy93

Bump Bump Bump Like B2k

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

Vizy93

bump this- ll cool j ft. 50 cent

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

dznutz

just format again and this time have some protection

__________________
ANTEC 900
COOLERMASTER EXTREME 500w
MSI NEO-F p35
INTEL E4500
EVGA geforce 7300gs
2gb CORSAIR XMS2
SAMSUNG SH-203N SATA
SEAGATE BARRACUDA 1Tb SATA
AIRLINK 101 300n pci
XP PRO 32 bit

ceewi1

I don't see any malware in that log, I'd like to see another log.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
• If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
• When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

__________________

Cheap PSUs - 2% of system costs, responsible for 28% of system deaths

Vizy93

sure ceewi, hold on...

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

Vizy93

i get the 'dss has encountered an error and needs to close down' while it is backing up my registy 'hives'. thats not good is it?

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

Vizy93

ok guys, i redownloaded and i got the same thing:

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.

ceewi1

OK, try this instead:

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Post the log from ComboFix when you've accomplished that.

__________________

Cheap PSUs - 2% of system costs, responsible for 28% of system deaths

Vizy93

combofix said wait a couple seconds, i lef tthe room and came back 1/2 hr later and my comp was completely locked up, no alt-tab-del, NOTHING! i restarted and im afraid to try again. im going to reseat my sound card....or switch the slot. im also going to connect the sound lead from my DVD player into my sound card, thats how it was beforei switched the case.

__________________
http://www.computerforum.com/6663-funniest-joke-world.html

"75% of all statistics are made up, including this one. 62.481% of people who read that believe it is true.
And if you're one of the 37.519% who don't, copy and paste this into your signature." - tlarkin, Cromewell, and Rambo.