Here's my logs.
- Thread starter Dizzy714
- Start date
Haven't ran ccleaner, but the Dell dude hopped up on my computer and dumped all the temporary files. I did a defrag about a month ago, the day after I installed my 2nd drive and noticed the slowdown in performance on the Vista drive. It took like 7 hours [haha], but didn't seem to do much of anything to the performance.
gamblingman
VIP Member
Hjt
Ok, while I am no expert at this stuff, and you should definitely listen to the mods first before doing risky things (cause the moderators really know what they are doing), but I have a few suggestions. I noticed a few items in your HJT logs that may pertain to registry problems or a virus (could be one or the other, or both). Have you tried to run CCleaner in the registry mode? I use that tool quite often on mine and others computers an it has solved many problems.
If you haven't downloaded CCleaner yet, what are you waiting for? Its one of the best programs I have, and if your online as much as me.... you definitely need it. You can get info on it and also pick it up here at their home page:
http://www.ccleaner.com/
(While installing CCleaner, you will be prompted for several program options. I would recommend unchecking the Yahoo Toolbar option they offer with the download. Also if at that same stage an option for running CCleaner at startup is shown as checked, then uncheck it.)
There are a few things this program can do. One is as a cleaner tool to rid your system of all the byproducts of many programs, such as items left in clipboard, cookies, cache, history, etc… and I run the cleaner everyday on my computer.
There is also a registry cleaner that scans for inactive, unused, unneeded, leftover registry items. This can help to reduce the chance of a virus finding a handhold on your system. I only run the registry tool once a month, and it automatically backs-up the registry before cleaning the registry.
(NOTE: I would HIGHLY recommend that this tool be run when nothing else is being performed on the computer, thus all other windows should be closed prior to using this tool and there are not processes running or about to run, like: an anti-virus scan, or when a Windows Update is running)
To Run the Cleaner Part of CCleaner:
Close all open programs (especially browser programs such as Internet Explorer, FireFox, Google Chrome, etc...)
Open CCleaner on the desktop
It should open straight into the Cleaner tab
Click ANALYZE (it will take longer to analyze depending on how often you run this tool)
Once it finishes analyzing click the RUN CLEANER button at the bottom
Your computer is clean!
To use the REGISTRY tool of CCleaner
Close all open programs
Open CCleaner on the desktop
Click the REGISTRY tab
Click SCAN FOR ISSUES and allow it to run
Once the scan is finished, look through the list and see if there are any items you wish to be untouched, uncheck those. (I usually uncheck any registry items related to my anti-virus program.)
Once you are ready to clean the registry click FIX SELECTED ISSUES
It will run, and fix the registry.
DONE!
*CCleaner has many other tools such as a UNINSTALL tool and a START-UP tool, both are very useful and I have used both many times. These are both located under the TOOL tab, use them as needed.
---
And in response to some people talking about the HJT reporting (file missing) entries... the file is there, HJT just isn't seeing it. You need to be very careful that you don't delete those entries just because you see that bit on the end of the HJT log line. The (file missing) does NOT mean that you can assume its a malicious entry.
If you see that on a line and are suspecting the entry as malicious or unneded, then I'd recommend for you to: post a question here about the entry in question, Google it to get info on it and its status, use CCleaner registry cleaner to check for missing/damaged registry entries you may have.
---
That may help some, but it seems like you have some problems other than that. Its starting up slow you say... how slow is slow to you? I only ask because everyone has a different conception of how long a start-up should take.
If you could record in minutes & sec how long it takes to go from pressing the on button to the operating system fully running ready to use; then post your result it may be helpful. For instance, it taking 2 minutes to get going is "ok". If it takes over 10 minutes to start-up, yeahs you guessed it; "...Houston, we have a problem!..."
To make your machine start-up faster and run better, there are a lot of start-up & service processes that do not need to be enabled. Items such as jsched, realsched, the Google updater, java quick starter, adobe updater/loader, AIM, AOL anything for that matter, do not need to be OK'd at startup or in running services
As always, be careful what you disable. But if you see entries such as "Real Player" updater on the msconfig start-up tab, yes its ok to uncheck it.
Cleaning the start-up, services tabs on msconfig of unneeded apps can usually add loads of speed to any computer. Also go into all your programs and check for updates. Real player, Google Earth, Java, and a few other programs are really bad about not updating like they should. Also check to be sure you have all the necessary Microsoft updates installed.
If you have the Google Toolbar, or the Yahoo Toolbar; chuck 'em both. And I believe you can remove them both in the CCleaner tools section. If not then go to add/remove programs and remove 'em.
OK, I'll stop here so I don't turn into a VISTA optimization post.
---
Well I would recommend that you get SUPER AntiSpyware, its a great addition in any computer! ha ha ha
Do ya get it? "...addition in any computer..." I laughed when I wrote it! ha ha ha
OK...my fiancee gave me the "your a dork" look when she read that, so dumb, dorky jokes aside; Super A/S is a great tool that I was shown recently. It does a great job scanning and looks in places and for things that your A/V and MWB may miss.
IF you want it, this is their homepage. You can DL it there.
http://www.superantispyware.com/
Give that a shot and see what comes back.
---
And I would not take it to a store like that (Staples is what I think you said). Ive personally seen some real problems from those types of places, especially since its a "free day" promotion. Everyone will be taking their computer in, and the people there will most likely give each computer a quick once-over. They're probably just gonna do something like scan with anti-virus, maybe delete the temp files, and then check for windows updates. Its your choice though, never know till ya try, eh?!
---
And what did you mean by "...but the Dell dude hopped up on my computer..."? Do you mean they helped you via remote assistance?
---
Ok, while I am no expert at this stuff, and you should definitely listen to the mods first before doing risky things (cause the moderators really know what they are doing), but I have a few suggestions. I noticed a few items in your HJT logs that may pertain to registry problems or a virus (could be one or the other, or both). Have you tried to run CCleaner in the registry mode? I use that tool quite often on mine and others computers an it has solved many problems.
If you haven't downloaded CCleaner yet, what are you waiting for? Its one of the best programs I have, and if your online as much as me.... you definitely need it. You can get info on it and also pick it up here at their home page:
http://www.ccleaner.com/
(While installing CCleaner, you will be prompted for several program options. I would recommend unchecking the Yahoo Toolbar option they offer with the download. Also if at that same stage an option for running CCleaner at startup is shown as checked, then uncheck it.)
There are a few things this program can do. One is as a cleaner tool to rid your system of all the byproducts of many programs, such as items left in clipboard, cookies, cache, history, etc… and I run the cleaner everyday on my computer.
There is also a registry cleaner that scans for inactive, unused, unneeded, leftover registry items. This can help to reduce the chance of a virus finding a handhold on your system. I only run the registry tool once a month, and it automatically backs-up the registry before cleaning the registry.
(NOTE: I would HIGHLY recommend that this tool be run when nothing else is being performed on the computer, thus all other windows should be closed prior to using this tool and there are not processes running or about to run, like: an anti-virus scan, or when a Windows Update is running)
To Run the Cleaner Part of CCleaner:
Close all open programs (especially browser programs such as Internet Explorer, FireFox, Google Chrome, etc...)
Open CCleaner on the desktop
It should open straight into the Cleaner tab
Click ANALYZE (it will take longer to analyze depending on how often you run this tool)
Once it finishes analyzing click the RUN CLEANER button at the bottom
Your computer is clean!
To use the REGISTRY tool of CCleaner
Close all open programs
Open CCleaner on the desktop
Click the REGISTRY tab
Click SCAN FOR ISSUES and allow it to run
Once the scan is finished, look through the list and see if there are any items you wish to be untouched, uncheck those. (I usually uncheck any registry items related to my anti-virus program.)
Once you are ready to clean the registry click FIX SELECTED ISSUES
It will run, and fix the registry.
DONE!
*CCleaner has many other tools such as a UNINSTALL tool and a START-UP tool, both are very useful and I have used both many times. These are both located under the TOOL tab, use them as needed.
---
And in response to some people talking about the HJT reporting (file missing) entries... the file is there, HJT just isn't seeing it. You need to be very careful that you don't delete those entries just because you see that bit on the end of the HJT log line. The (file missing) does NOT mean that you can assume its a malicious entry.
If you see that on a line and are suspecting the entry as malicious or unneded, then I'd recommend for you to: post a question here about the entry in question, Google it to get info on it and its status, use CCleaner registry cleaner to check for missing/damaged registry entries you may have.
---
That may help some, but it seems like you have some problems other than that. Its starting up slow you say... how slow is slow to you? I only ask because everyone has a different conception of how long a start-up should take.
If you could record in minutes & sec how long it takes to go from pressing the on button to the operating system fully running ready to use; then post your result it may be helpful. For instance, it taking 2 minutes to get going is "ok". If it takes over 10 minutes to start-up, yeahs you guessed it; "...Houston, we have a problem!..."
To make your machine start-up faster and run better, there are a lot of start-up & service processes that do not need to be enabled. Items such as jsched, realsched, the Google updater, java quick starter, adobe updater/loader, AIM, AOL anything for that matter, do not need to be OK'd at startup or in running services
As always, be careful what you disable. But if you see entries such as "Real Player" updater on the msconfig start-up tab, yes its ok to uncheck it.
Cleaning the start-up, services tabs on msconfig of unneeded apps can usually add loads of speed to any computer. Also go into all your programs and check for updates. Real player, Google Earth, Java, and a few other programs are really bad about not updating like they should. Also check to be sure you have all the necessary Microsoft updates installed.
If you have the Google Toolbar, or the Yahoo Toolbar; chuck 'em both. And I believe you can remove them both in the CCleaner tools section. If not then go to add/remove programs and remove 'em.
OK, I'll stop here so I don't turn into a VISTA optimization post.
---
Well I would recommend that you get SUPER AntiSpyware, its a great addition in any computer! ha ha ha
Do ya get it? "...addition in any computer..." I laughed when I wrote it! ha ha ha
OK...my fiancee gave me the "your a dork" look when she read that, so dumb, dorky jokes aside; Super A/S is a great tool that I was shown recently. It does a great job scanning and looks in places and for things that your A/V and MWB may miss.
IF you want it, this is their homepage. You can DL it there.
http://www.superantispyware.com/
Give that a shot and see what comes back.
---
And I would not take it to a store like that (Staples is what I think you said). Ive personally seen some real problems from those types of places, especially since its a "free day" promotion. Everyone will be taking their computer in, and the people there will most likely give each computer a quick once-over. They're probably just gonna do something like scan with anti-virus, maybe delete the temp files, and then check for windows updates. Its your choice though, never know till ya try, eh?!
---
And what did you mean by "...but the Dell dude hopped up on my computer..."? Do you mean they helped you via remote assistance?
---
Last edited:
That would be vista for you, it's been an issue since vista was released. Not really missing however. Windows 7 is the same way. It may be fixed with the new version of hijackthis coming out, which right now they have the beta out for version 2.0.3
G25r8cer
Active Member
gamblingman
VIP Member
hey Dizzy714
Hey Dizzy714 did you ever get your anti-virus to load?
If you cant get it to load, can you tell us this:
1. Did you have to reinstall it or "fix it" and THEN you had the problems?
2. Or was it that you had (have) infections and that may be causing a failure of the A/V to load?
3. OR did you do an update on your A/V and it wouldn't load after that?
4. OTHER
---
If its the #1, I'd try the following:
Re-download NOD32 and save it to the Desktop, go into safe mode w/o networking, uninstall the already installed NOD32, and THEN re-install the downloaded NOD32 that would be on your desktop. Then try to scan.
If that doesn't work, then DL a different A/V program, go into safe mode w/o networking, uninstall NOD32, then install the new A/V program. Then try to scan.
If its #2, then work on clearing the infection first by using the tools you have been given (Malwarebytes, Super Antispyware, Microsoft's Malicious Software Removal Tool (see below for info on this and the link, etc...)).
OR, this is kind of extreme, consider using your original Windows install disk and reinstall the OS. A reinstall of your OS should completely clear the problem, unless..... yeah. If you use a backup hard drive or an online backup, you may also want to delete all of that if you are unsure how effectively you can scan the backup to remove any infections.
A reinstall of the OS is obviously the least preferred method of cleaning your computer, but it does clear the infection! I've had to do this numerous times to my in-laws computer because they are so careless when online. (However let me make this clear, I am not suggesting that you are careless. Infections can happen. My in-laws are just very careless, and reinstalling the OS is usually the only option I can offer them. )
On #3, if it was an update that made the problem (and I have had that problem). Then you MIGHT try to rollback to a previous update, then see if it will load. I had this problem once, and had to rollback my TrendMicro to a previous state until they issued a fixed update. I am not sure if you can do this with NOD32 though, so you may want to check and see.
Is your machine clean yet, or are you still having problems? If your still having problems, what are the problems? I believe that you already have HJT, Malwarebytes, and CCleaner. Have you updated Malwarebytes then scanned with it recently?
#4 Is there anything that may have happened that could be causing this problem? Has the way your computer runs changed recently due to a BIOS update or a windows update? Has there been any physical damage to your computer recently (moving, kids, liquid spills, etc...)? Is there anything that may have changed and/or happened in the past that could be causing problems with your computer? Does anyone but you use this computer?
---
To remove the infection(s):
There is the possibility that you could use TrendMicro home call. BUT it may not scan properly due to a possible interference with your already installed A/V. I am not sure on this point though, does anyone else have knowledge on this potential interaction? Though if it were me, and I had no other choice I would probably use this free service in hopes it would help.
Another thought that came to my mind while I was out driving the little lady around for shopping (I'm glad to be home now! ha ha ha). Have you scanned with Malwarebytes and/or SuperAntispyware in SAFE MODE? (I'd recommend SAFE MODE w/o networking) If you scan in safe mode, the virus removal tools can work more efficiently. CCleaner also has a better ability to remove objects that may be locked in normal boot mode.
I would also mention that you can run the Malicious Software Removal Tool that Microsoft offers. This is not an A/V program, it is simply another malicious object removal tool, one that's offered by Microsoft. The page for info and the link to the DL of the tool is here:
http://www.microsoft.com/security/antivirus/remove.aspx
I wish Combofix was up and running, but it isn't. I would recommend getting that once its repaired and reissued then scan with it and post the log here.
***And of course make sure all tools you are scanning with are updated to the most recent stable versions.***
Hey Dizzy714 did you ever get your anti-virus to load?
If you cant get it to load, can you tell us this:
1. Did you have to reinstall it or "fix it" and THEN you had the problems?
2. Or was it that you had (have) infections and that may be causing a failure of the A/V to load?
3. OR did you do an update on your A/V and it wouldn't load after that?
4. OTHER
---
If its the #1, I'd try the following:
Re-download NOD32 and save it to the Desktop, go into safe mode w/o networking, uninstall the already installed NOD32, and THEN re-install the downloaded NOD32 that would be on your desktop. Then try to scan.
If that doesn't work, then DL a different A/V program, go into safe mode w/o networking, uninstall NOD32, then install the new A/V program. Then try to scan.
If its #2, then work on clearing the infection first by using the tools you have been given (Malwarebytes, Super Antispyware, Microsoft's Malicious Software Removal Tool (see below for info on this and the link, etc...)).
OR, this is kind of extreme, consider using your original Windows install disk and reinstall the OS. A reinstall of your OS should completely clear the problem, unless..... yeah. If you use a backup hard drive or an online backup, you may also want to delete all of that if you are unsure how effectively you can scan the backup to remove any infections.
A reinstall of the OS is obviously the least preferred method of cleaning your computer, but it does clear the infection! I've had to do this numerous times to my in-laws computer because they are so careless when online. (However let me make this clear, I am not suggesting that you are careless. Infections can happen. My in-laws are just very careless, and reinstalling the OS is usually the only option I can offer them. )
On #3, if it was an update that made the problem (and I have had that problem). Then you MIGHT try to rollback to a previous update, then see if it will load. I had this problem once, and had to rollback my TrendMicro to a previous state until they issued a fixed update. I am not sure if you can do this with NOD32 though, so you may want to check and see.
Is your machine clean yet, or are you still having problems? If your still having problems, what are the problems? I believe that you already have HJT, Malwarebytes, and CCleaner. Have you updated Malwarebytes then scanned with it recently?
#4 Is there anything that may have happened that could be causing this problem? Has the way your computer runs changed recently due to a BIOS update or a windows update? Has there been any physical damage to your computer recently (moving, kids, liquid spills, etc...)? Is there anything that may have changed and/or happened in the past that could be causing problems with your computer? Does anyone but you use this computer?
---
To remove the infection(s):
There is the possibility that you could use TrendMicro home call. BUT it may not scan properly due to a possible interference with your already installed A/V. I am not sure on this point though, does anyone else have knowledge on this potential interaction? Though if it were me, and I had no other choice I would probably use this free service in hopes it would help.
Another thought that came to my mind while I was out driving the little lady around for shopping (I'm glad to be home now! ha ha ha). Have you scanned with Malwarebytes and/or SuperAntispyware in SAFE MODE? (I'd recommend SAFE MODE w/o networking) If you scan in safe mode, the virus removal tools can work more efficiently. CCleaner also has a better ability to remove objects that may be locked in normal boot mode.
I would also mention that you can run the Malicious Software Removal Tool that Microsoft offers. This is not an A/V program, it is simply another malicious object removal tool, one that's offered by Microsoft. The page for info and the link to the DL of the tool is here:
http://www.microsoft.com/security/antivirus/remove.aspx
I wish Combofix was up and running, but it isn't. I would recommend getting that once its repaired and reissued then scan with it and post the log here.
***And of course make sure all tools you are scanning with are updated to the most recent stable versions.***
Yeah once John mentioned Ccleaner, I installed it. Ran the scan, then also ran the registry scan as well. There were quite a few problems in the registry that it cleaned up.
I would say my computer boots up in probably 45 seconds or so, it's not really usable for at least a few minutes though.
I've also ran the msconfig to disable a lot of startup program [actually the Dell guy did this, yes through remote assistance] - so now there's only 4 things that start up initially.
Now, let's say I do have a virus of some sort - could that carry on to my other hard drive? At the moment I have my new 1.5TB drive disconnected, until I install my new power supply atleast. But yeah, can a virus somehow transfer over to that drive or no?
I would say my computer boots up in probably 45 seconds or so, it's not really usable for at least a few minutes though.
I've also ran the msconfig to disable a lot of startup program [actually the Dell guy did this, yes through remote assistance] - so now there's only 4 things that start up initially.
Now, let's say I do have a virus of some sort - could that carry on to my other hard drive? At the moment I have my new 1.5TB drive disconnected, until I install my new power supply atleast. But yeah, can a virus somehow transfer over to that drive or no?