Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93101 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

My Laptop is running soooooo slooooow!


  • This topic is locked This topic is locked
35 replies to this topic

#31 boltons

boltons

    Authentic Member

  • Authentic Member
  • PipPip
  • 27 posts

Posted 29 July 2006 - 05:54 AM

Hi Little Eagle,

I have news - good news.
One of my shipmates is a computer type and heard me moaning about my slow laptop.
He educated me about several things that really helped.
I've deleted a lot of files that I was reluctant to let go. I, also, did not realize the benefit of having a clean desktop and having almost all "shortcuts" on the desktop. As I made the changes, the speed of the laptop really started improving. Also, I've tried to really reduce the number of items that start up on boot-up. I've used msconfig in the RUN field to access the STARTUP tab. Now the laptop speed is nearly back to what I've come to know as normal.
Below is a copy of the log file from HJT after I've done as much of the above as I dared.
Let me know if this helps you help me. I haven't purchased anything yet. And, I now feel I have a fighting chance if I go directly online with my laptop.
This message / response is on the ship's laptop (via wireless internet connections) as I've always done during our troubleshooting.
Thanks again.............Hez


Logfile of HijackThis v1.99.1
Scan saved at 11:43:16 PM, on 7/28/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\HJT\v1991\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.heaven600.com/main.html
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.google.com/"); (C:\Program Files\Netscape\Users\boltons\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zone...ctor/WebAAS.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Advertisements

Register to Remove


#32 little eagle

little eagle

    spyware hawk

  • Visiting Fellow
  • PipPipPipPipPipPip
  • 8,968 posts
  • Interests:spyware

Posted 29 July 2006 - 08:05 AM

Click start > control panel > user accounts > change the way users log on or off > uncheck fast user switching > restart you computor.

Download, unzip and run 'RootkitRevealer' from Sysinternals:
http://www.sysintern...itRevealer.html
Once the program has started, press Scan and let it run.
When the scan is done, use 'File > Save' to place the logfile in a convenient location (such as the desktop). The default filename will be 'RootkitReveal.txt'.

Save your Log File
Copy/Paste the contecnts of that logfile into your next reply

NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !

That way you should have a much simpler and clearer log file in which to pursue and evaluate.

#33 boltons

boltons

    Authentic Member

  • Authentic Member
  • PipPip
  • 27 posts

Posted 31 July 2006 - 08:11 AM

Hi Little Eagle, Thanks again for the information. I "unchecked fast user switching" and restarted the computer (if I may ask, what does this do? I don't expect to understand everything you suggest, but I am curious on this task). Below is the log file from "bootkitrevealer" scan. NOTE: only one thing found. HKLM\S-1-5-21-527237240-688789844-1060284298-1003\RemoteAccess\InternetProfile 6/8/2006 7:49 PM 17 bytes Data mismatch between Windows API and raw hive data.

#34 little eagle

little eagle

    spyware hawk

  • Visiting Fellow
  • PipPipPipPipPipPip
  • 8,968 posts
  • Interests:spyware

Posted 31 July 2006 - 06:00 PM

If you are talking about RootkitRevealer it checks for rootkit's more on it here.

fast user switching lets you switch users with out logging off of the other account.

Log looks ok, I'm not seeing anything wrong :scratch:

#35 boltons

boltons

    Authentic Member

  • Authentic Member
  • PipPip
  • 27 posts

Posted 01 August 2006 - 10:17 AM

Little Eagle, I'm happy w/ how things are going now! Believe it not, I've learned a lot. Considering all we've done, I really want to thank you for your patience and your technical advice. I feel we can call this case closed. I'll be in touch for my next problem. All the best to everyone on your end.... Hez

#36 little eagle

little eagle

    spyware hawk

  • Visiting Fellow
  • PipPipPipPipPipPip
  • 8,968 posts
  • Interests:spyware

Posted 01 August 2006 - 04:02 PM

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Related Topics



2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users