This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Computer not acting right

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

I'm running XP on a Dell Celeron. Files are not reading correctly, windows that should be coming up are not, can not copy files from CD to desktop. I have used CCleanner on it and am running MS Essentials for virus protection. Could someone look at the DDS outputs and tell me what is wrong? DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 15:45:16.95 on Mon 11/08/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.510.146 [GMT -5:00] AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe c:\Program Files\Microsoft Security Essentials\MsMpEng.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Microsoft Security Essentials\msseces.exe svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Administrator\Desktop\dds.exe ============== Pseudo HJT Report =============== uRun: [Google Update] "c:\documents and settings\administrator\local settings\application data\google\update\GoogleUpdate.exe" /c uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide -runkey mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe Notify: igfxcui - igfxsrvc.dll ============= SERVICES / DRIVERS =============== =============== Created Last 30 ================ 2010-10-15 21:40 155,648 a——- c:\windows\system32\igfxres.dll 2010-10-13 20:54 –d—– c:\docume~1\alluse~1\applic~1\Symantec 2010-10-13 20:54 –d—– c:\docume~1\alluse~1\applic~1\Norton 2010-10-13 20:54 –d—– c:\docume~1\alluse~1\applic~1\NortonInstaller 2010-10-13 17:56 –d—– c:\program files\common files\DivX Shared 2010-10-13 17:54 –d—– c:\program files\DivX 2010-10-13 17:48 –d—– c:\docume~1\alluse~1\applic~1\DivX ==================== Find3M ==================== 2010-10-19 15:51 222,080 ——– c:\windows\system32\MpSigStub.exe 2010-10-02 18:33 86,327 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2010-10-01 17:52 21,640 a——- c:\windows\system32\emptyregdb.dat 2010-09-18 11:23 974,848 a——- c:\windows\system32\mfc42u.dll 2010-09-18 01:53 974,848 a——- c:\windows\system32\mfc42.dll 2010-09-18 01:53 954,368 a——- c:\windows\system32\mfc40.dll 2010-09-18 01:53 953,856 a——- c:\windows\system32\mfc40u.dll 2010-09-10 00:58 916,480 a——- c:\windows\system32\wininet.dll 2010-09-10 00:58 43,520 a——- c:\windows\system32\licmgr10.dll 2010-09-08 16:41 1,614,848 a——- c:\windows\system32\sfcfiles.dll 2010-09-08 16:41 483,840 a——- c:\windows\system32\wzcsvc.dll 2010-09-08 16:41 294,912 a——- c:\windows\system32\msh263.drv 2010-09-08 16:41 52,736 a——- c:\windows\system32\wzcsapi.dll 2010-09-08 16:41 52,224 a——- c:\windows\system32\dmutil.dll 2010-09-08 16:41 48,128 a——- c:\windows\system32\iyuv_32.dll 2010-09-08 16:41 47,104 a——- c:\windows\system32\cnbjmon.dll 2010-09-08 16:41 35,328 a——- c:\windows\system32\pid.dll 2010-09-08 16:41 20,992 a——- c:\windows\system32\hid.dll 2010-09-08 16:41 17,920 a——- c:\windows\system32\msyuv.dll 2010-09-08 16:41 15,360 a——- c:\windows\system32\pjlmon.dll 2010-09-08 16:33 41,080 a——- c:\windows\system32\NicInstG.dll 2010-09-08 16:33 28,272 a——- c:\windows\system32\NicCo2.dll 2010-09-08 16:33 121,440 a——- c:\windows\system32\e1000msg.dll 2010-09-08 16:33 990,208 a——- c:\windows\system32\syssetup.dll 2010-09-08 16:32 744,448 a——- c:\windows\pchealth\helpctr\binaries\HelpSvc.exe 2010-09-08 16:32 1,172,480 a——- c:\windows\system32\msxml3.dll 2010-09-08 16:32 80,384 a——- c:\windows\system32\iccvid.dll 2010-09-08 16:32 2,190,080 a——- c:\windows\system32\ntoskrnl.exe 2010-09-08 16:32 2,066,944 a——- c:\windows\system32\ntkrnlpa.exe 2010-09-08 16:32 149,504 a——- c:\windows\system32\schannel.dll 2010-09-08 16:30 204,800 a——- c:\windows\system32\mswebdvd.dll 2010-09-08 16:29 453,120 a——- c:\windows\system32\wbem\wmiprvsd.dll 2010-09-08 16:28 253,952 a——- c:\windows\system32\es.dll 2010-09-01 06:48 285,824 a——- c:\windows\system32\atmfd.dll 2010-08-31 08:38 1,861,888 a——- c:\windows\system32\win32k.sys 2010-08-27 03:01 119,808 a——- c:\windows\system32\t2embed.dll 2010-08-27 01:05 99,840 a——- c:\windows\system32\srvsvc.dll 2010-08-26 07:52 5,120 a——- c:\windows\system32\xpsp4res.dll 2010-08-23 11:12 617,472 a——- c:\windows\system32\comctl32.dll 2010-08-17 08:17 58,880 a——- c:\windows\system32\spoolsv.exe 2010-08-16 03:43 590,848 a——- c:\windows\system32\rpcrt4.dll ============= FINISH: 15:45:45.18 ===============

Attachments:

Posted Image

DO NOT use any TOOLS such as Combofix, Vundofix, or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.


Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")



The issues with your computer that you list, doesn't appear to be related to Malware/Spyware/Virus but we can have a look.


Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Uncheck "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Uncheck "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless instructed to.


Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
[external image: Posted Image]
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Also please describe how your computer behaves at the moment.


Please don't attach the scans / logs, use "copy/paste". .

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI