Jump to content

Build Theme!
  •  
  • Unreplied Topics
  • Downloads
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93083 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] Extremely slow typing response time in IE

Started by pinkstonj , Jan 16 2009 11:29 PM

  • This topic is locked This topic is locked
3 replies to this topic

#1 pinkstonj

pinkstonj

    New Member

  • New Member
  • Pip
  • 2 posts

Posted 16 January 2009 - 11:29 PM

I am experiencing extremely slow typing/keboard response time in IE. If I type a word it takes up to ten seconds to appear on the screen. Its almost as if my computer is "spooling" my keybaord entries and putting a couple second delay between each one. I suspect malware. Any help is appreciated because my computer is basically useless right now. My HJT log is below:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:21:01 PM, on 1/16/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=1061125
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.google.com/mail/#inbox
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=1061125
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 172.16.10.105 BDC_NB1
O1 - Hosts: 172.16.10.106 BDC_NB2
O1 - Hosts: 172.16.10.193 IWCS.KMOB.COM
O1 - Hosts: 172.17.10.100 BDC_SD1
O1 - Hosts: 172.19.10.103 SEA-DOCS
O1 - Hosts: 172.20.10.105 BDC-LA1
O1 - Hosts: 172.20.10.105 BDC-LA1.KMOB.COM
O1 - Hosts: 172.20.10.106 BDC-LA2
O1 - Hosts: 172.20.10.106 BDC-LA2.KMOB.COM
O1 - Hosts: 172.16.10.111 CDTOWER
O1 - Hosts: 172.22.10.100 DOCS_RS
O1 - Hosts: 172.17.10.102 DOCS_SD
O1 - Hosts: 172.21.10.100 DOCS_SLO
O1 - Hosts: 172.20.10.103 DOCS-LA
O1 - Hosts: 172.20.10.103 DOCS-LA.KMOB.COM
O1 - Hosts: 172.16.10.124 DOCS-OC
O1 - Hosts: 172.16.10.124 DOCS-OC.KMOB.COM
O1 - Hosts: 172.22.10.105 DOCS-RS
O1 - Hosts: 172.22.10.105 DOCS-RS.KMOB.COM
O1 - Hosts: 172.17.10.103 DOCS-SD
O1 - Hosts: 172.23.10.103 DOCS-SF
O1 - Hosts: 172.21.10.105 DOCS-SLO
O1 - Hosts: 172.21.10.105 DOCS-SLO.KMOB.COM
O1 - Hosts: 172.16.10.100 ELITE
O1 - Hosts: 172.16.10.30 ELITESQL
O1 - Hosts: 172.16.10.160 BLACKBERRY
O1 - Hosts: 172.16.10.152 EXCHANGE-OC
O1 - Hosts: 172.16.10.152 EXCHANGE-OC.KMOB.COM
O1 - Hosts: 172.16.10.223 GRAPHICS
O1 - Hosts: 172.16.20.70 laser
O1 - Hosts: 172.16.10.182 OC_PRINT_COPIER
O1 - Hosts: 172.16.10.180 OC_PRINT_EVEN
O1 - Hosts: 172.16.10.181 OC_PRINT_ODD
O1 - Hosts: 172.16.10.117 PDC_NB
O1 - Hosts: 172.16.10.121 SQL
O1 - Hosts: 172.16.10.120 TERMSERV
O1 - Hosts: 172.16.10.224 TRANSFER
O1 - Hosts: 172.16.10.165 VERITAS-RMS
O1 - Hosts: 172.16.10.165 VERITAS-RMS.KMOB.COM
O1 - Hosts: 172.16.10.119 WHITEHILL
O1 - Hosts: 172.16.20.71 whiteprint
O1 - Hosts: 172.16.10.127 drafting-cube
O1 - Hosts: 172.16.10.39 KMOBftp
O1 - Hosts: 172.16.10.20 OC-DC1
O1 - Hosts: 172.16.10.20 OC-DC1.KMOB.COM
O1 - Hosts: 172.16.10.21 OC-DC2
O1 - Hosts: 172.16.10.21 OC-DC2.KMOB.COM
O1 - Hosts: 172.16.10.22 OC-EXCHANGE-1
O1 - Hosts: 172.16.10.22 OC-EXCHANGE-1.KMOB.COM
O1 - Hosts: 172.16.10.23 OC-EXCHANGE-2
O1 - Hosts: 172.16.10.23 OC-EXCHANGE-2.KMOB.COM
O1 - Hosts: 172.16.10.24 OC-EXCHCLU
O1 - Hosts: 172.16.10.25 EXCHCLU-MSDTC
O1 - Hosts: 172.16.10.136 OC_KRONOS
O1 - Hosts: 172.16.10.191 IDMS
O1 - Hosts: 172.16.10.26 OWA-2003
O1 - Hosts: 172.16.10.26 OWA-2003.KMOB.COM
O1 - Hosts: 172.16.10.27 EXCH2003-OC
O1 - Hosts: 172.16.10.27 EXCH2003-OC.KMOB.COM
O1 - Hosts: 172.16.10.29 OC-FAXSERVER
O1 - Hosts: 172.16.10.229 ATTORNEYS.KMOB.COM
O1 - Hosts: 172.16.10.229 WWW.KMOB.COM
O1 - Hosts: 172.16.10.229 KMOB.COM
O1 - Hosts: 172.16.10.115 KMOBNET
O1 - Hosts: 172.16.10.26 OWA-2003
O1 - Hosts: 172.16.10.26 SECURE.KMOB.COM
O1 - Hosts: 172.16.10.118 KMOBNETOLD
O1 - Hosts: 172.16.10.191 IDMS
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail....es/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.mi...b?1231900810159
O16 - DPF: {9C3E8350-5873-4D8E-A1D4-DCB9E885E86D} (CYBSnoop Control) - http://www.cybersitt...vex/AXSnoop.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = KMOB
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = KMOB
O19 - User stylesheet: (file missing)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: __c001270D - C:\WINDOWS\
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 9384 bytes

    Advertisements

Register to Remove

#2 pinkstonj

pinkstonj

    New Member

  • New Member
  • Pip
  • 2 posts

Posted 19 January 2009 - 08:01 PM

Fixed it myself.

Turns out it was due to a driver/service called "ATI hotkey poller." See the following blog for more details: http://my.opera.com/...ng-on-my-laptop

#3 Tomk

Tomk

    Beguilement Monitor

  • Global Moderator
  • 20,451 posts

Posted 27 January 2009 - 11:26 PM

pinkstonj, Thanks for letting us know. :notworthy: Good Luck and Be Well. :thumbup:
Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014
 

#4 Tomk

Tomk

    Beguilement Monitor

  • Global Moderator
  • 20,451 posts

Posted 27 January 2009 - 11:26 PM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.
Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014
 

Related Topics

Back to Virus, Spyware & Malware Removal · Next Unread Topic →

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. What the Tech
  2. → Spyware / Malware / Virus Removal
  3. → Virus, Spyware & Malware Removal
  4. Privacy Policy
  5. Terms of Use ·