What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

lxi master 7.8v5 Runtime Error abnormal program termination

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Lets try running it in Safemode

To Enter Safemode
  • Go to Start> Shut off your Computer> Restart
  • As the computer starts to boot-up, Tap the F8 KEY somewhat rapidly,
    this will bring up a menu.
  • Use the Up and Down Arrow Keys to scroll up to Safemode with Networking
  • Then press the Enter Key on your Keyboard
Tutorial if you need it How to boot into Safemode
Post #18
Good Morning,

Run this quick scan and lets make sure TDSS is gone

Download DDS from one of the links below to your desktop

Link 1
Link 2

  • Double click the tool to run it.
  • A black Screen will open, just read the contents and do nothing.
  • When the tool finishes, it will open 2 reports, DDS.txt and attach.txt
  • Copy/Paste the contents of 'DDS.txt' into your post.
  • 'attach.txt' should be zipped using Windows native zip utility and attached to your post. Compress and uncompress files (zip files)
Post #19
DDS (Ver_10-12-12.02) - NTFSx86 Run by [removed] at 16:57:11.96 on Tue 12/21/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3582.2941 [GMT -5:00] FW: ZoneAlarm Firewall *Enabled* ============== Running Processes =============== C:\Program Files\a-squared Anti-Malware\a2service.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost -k DcomLaunch C:\WINDOWS\system32\svchost -k rpcss C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\Program Files\Application Updater\ApplicationUpdater.exe C:\WINDOWS\system32\ASTSRV.EXE C:\mysql\bin\mysqld-nt.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe svchost.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\CheckPoint\ZAForceField\ForceField.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Pat\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.comcast.net/ mWinlogon: Userinit=c:\windows\system32\userinit.exe TB: {71576546-354D-41c9-AAE8-31F2EC22BF0D} - No File TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll TB: ZoneAlarm Security Toolbar: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - c:\program files\zonealarm_security\tbZone.dll TB: ZoneAlarm Security Engine: {ee2ac4e5-b0b0-4ec6-88a9-bca1a32ab107} - c:\program files\checkpoint\zaforcefield\trustchecker\bin\TrustCheckerIEPlugin.dll TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe" uRun: [igndlm.exe] c:\program files\download manager\DLM.exe /windowsstart /startifwork uRun: [Steam] "c:\program files\steam\Steam.exe" -silent uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe" mRun: [P17Helper] Rundll32 P17.dll,P17Helper mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [CTHelper] CTHELPER.EXE mRun: [CTxfiHlp] CTXFIHLP.EXE mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [ddoctorv2] "c:\program files\comcast\desktop doctor\bin\sprtcmd.exe" /P ddoctorv2 mRun: [] mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe mRun: [AcronisTimounterMonitor] c:\program files\acronis\trueimagehome\TimounterMonitor.exe mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe" mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe" mRun: [USB2Check] RUNDLL32.EXE "c:\windows\system32\PCLECoInst.dll",CheckUSBController mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [ZoneAlarm Client] "c:\program files\zone labs\zonealarm\zlclient.exe" mRun: [ISW] "c:\program files\checkpoint\zaforcefield\ForceField.exe" /icon="hidden" StartupFolder: c:\docume~1\pat\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\program files\icq6.5\ICQ.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL Trusted Zone: shoutcast.com\www Trusted Zone: witchezbrew.com Trusted Zone: wix.com DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} - hxxp://www.activeworlds.com/products/ActiveWorldsDownload.cab DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} - hxxp://www.quest3d.com/webplugin/download/quest3dactivex2.cab DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} - hxxps://kingsisle.hs.llnwd.net/e1/static/themes/wizard101A/activex/Wizard101GameLauncher.CAB DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} - hxxp://fdl.msn.com/public/chat/msnchat45.cab Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL Notify: a8f8e94f867 - c:\windows\system32\ctscal32.dll Notify: LMIinit - LMIinit.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: {4F07DA45-8170-4859-9B5F-037EF2970034} - No File SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL ============= SERVICES / DRIVERS =============== R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656] R1 vsdatant;vsdatant;c:\windows\system32\vsdatant.sys [2010-12-14 532224] R2 a2AntiMalware;a-squared Anti-Malware Service;c:\program files\a-squared anti-malware\a2service.exe [2010-4-2 2953808] R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2010-1-7 380928] R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\checkpoint\zaforcefield\ISWKL.sys [2010-11-5 26872] R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2009-11-6 47640] R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328] R2 vsmon;TrueVector Internet Monitor;c:\windows\system32\zonelabs\vsmon.exe -service –> c:\windows\system32\zonelabs\vsmon.exe -service [?] R3 PciPPorts;PCI ECP Parallel Port;c:\windows\system32\drivers\PciPPorts.sys [2010-6-22 82432] S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys –> c:\windows\system32\drivers\Lbd.sys [?] S0 lgrxvxwj;lgrxvxwj;c:\windows\system32\drivers\mylo.sys –> c:\windows\system32\drivers\mylo.sys [?] S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\logmein\x86\rainfo.sys –> c:\program files\logmein\x86\RaInfo.sys [?] S3 a2acc;a2acc;c:\program files\a-squared anti-malware\a2accx86.sys [2010-8-8 72808] S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;c:\windows\system32\drivers\ADM8511.SYS [2009-5-12 20160] S3 ALSysIO;ALSysIO;\??\c:\docume~1\pat\locals~1\temp\alsysio.sys –> c:\docume~1\pat\locals~1\temp\ALSysIO.sys [?] S3 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\checkpoint\zaforcefield\ISWSVC.exe [2010-11-5 488952] S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys –> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?] S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service –> c:\windows\system32\GameMon.des -service [?] S3 OQG;OQG;c:\docume~1\pat\locals~1\temp\oqg.exe –> c:\docume~1\pat\locals~1\temp\OQG.exe [?] S3 vtany;vtany;\??\c:\windows\vtany.sys –> c:\windows\vtany.sys [?] S3 XDva349;XDva349;\??\c:\windows\system32\xdva349.sys –> c:\windows\system32\XDva349.sys [?] S3 xhunter1;xhunter1;\??\c:\windows\xhunter1.sys –> c:\windows\xhunter1.sys [?] S4 LMIRfsClientNP;LMIRfsClientNP; [x] =============== Created Last 30 ================ 2010-12-21 21:14:43 ——– d-s—w- C:\ComboFix 2010-12-20 02:45:53 40960 -c—-w- c:\windows\system32\dllcache\ndproxy.sys 2010-12-20 02:45:26 45568 -c—-w- c:\windows\system32\dllcache\wab.exe 2010-12-18 22:33:33 ——– d-sha-r- C:\cmdcons 2010-12-18 19:19:57 98816 —-a-w- c:\windows\sed.exe 2010-12-18 19:19:57 89088 —-a-w- c:\windows\MBR.exe 2010-12-18 19:19:57 256512 —-a-w- c:\windows\PEV.exe 2010-12-18 19:19:57 161792 —-a-w- c:\windows\SWREG.exe 2010-12-16 17:14:46 ——– dc-h–w- c:\windows\ie8 2010-12-16 16:20:16 8576 —-a-w- c:\windows\system32\drivers\bcnsrurlpilm.sys 2010-12-16 16:15:20 7680 —-a-w- c:\windows\system32\drivers\RKL2B.tmp.sys 2010-12-16 15:22:42 ——– d—–w- c:\docume~1\pat\applic~1\SUPERAntiSpyware.com 2010-12-16 15:22:42 ——– d—–w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com 2010-12-16 15:22:33 ——– d—–w- c:\program files\SUPERAntiSpyware 2010-12-14 19:22:34 ——– d—–w- c:\docume~1\pat\applic~1\CheckPoint 2010-12-14 19:15:53 ——– d—–w- c:\windows\Internet Logs 2010-12-13 05:01:20 ——– d—–w- c:\docume~1\alluse~1\applic~1\TuneUp Software 2010-12-13 04:59:02 ——– d-sh–w- c:\docume~1\alluse~1\applic~1\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} 2010-12-13 00:14:13 ——– d—–w- C:\1contact 2010-12-12 21:20:15 ——– d—–w- c:\docume~1\pat\locals~1\applic~1\Sunbelt Software 2010-12-11 17:18:22 12160 -c–a-w- c:\windows\system32\dllcache\mouhid.sys 2010-12-11 17:18:22 12160 —-a-w- c:\windows\system32\drivers\mouhid.sys 2010-12-11 17:18:19 14592 -c–a-w- c:\windows\system32\dllcache\kbdhid.sys 2010-12-11 17:18:19 14592 —-a-w- c:\windows\system32\drivers\kbdhid.sys 2010-12-11 17:13:36 ——– d—–w- c:\windows\system32\wbem\repository\FS 2010-12-11 17:13:36 ——– d—–w- c:\windows\system32\wbem\Repository 2010-12-11 02:10:48 ——– d—–w- c:\program files\Emsisoft HiJackFree 2010-12-10 22:07:33 0 —-a-w- c:\windows\Qwepodemadavaku.bin 2010-12-10 22:07:32 ——– d—–w- c:\docume~1\pat\locals~1\applic~1\{BF91E067-3E83-4B89-8E04-B68FF632D5E9} 2010-12-08 02:35:22 ——– d—–w- c:\program files\Skype(2) 2010-12-04 19:59:07 ——– d—–w- c:\docume~1\alluse~1\applic~1\Firefly Studios 2010-12-04 19:35:04 ——– d—–w- C:\New Folder ==================== Find3M ==================== 2010-11-30 16:39:52 189480 —-a-w- c:\windows\system32\PnkBstrB.xtr 2010-11-30 16:39:52 189480 —-a-w- c:\windows\system32\PnkBstrB.exe 2010-11-18 18:12:44 81920 —-a-w- c:\windows\system32\isign32.dll 2010-11-16 22:45:54 1238528 —-a-w- c:\windows\system32\zpeng25.dll 2010-11-06 00:26:58 916480 —-a-w- c:\windows\system32\wininet.dll 2010-11-06 00:26:58 43520 —-a-w- c:\windows\system32\licmgr10.dll 2010-11-06 00:26:58 1469440 —-a-w- c:\windows\system32\inetcpl.cpl 2010-11-03 12:25:54 385024 —-a-w- c:\windows\system32\html.iec 2010-10-28 13:13:22 290048 —-a-w- c:\windows\system32\atmfd.dll 2010-10-26 13:25:00 1853312 —-a-w- c:\windows\system32\win32k.sys 2010-10-24 17:06:30 139152 —-a-w- c:\docume~1\pat\applic~1\PnkBstrK.sys 2010-10-24 17:06:11 794408 —-a-w- c:\windows\system32\pbsvc.exe 2010-10-24 17:06:11 75064 —-a-w- c:\windows\system32\PnkBstrA.exe 2010-10-14 13:02:15 88 –sh–r- c:\docume~1\alluse~1\applic~1\278FB3479F.sys 2010-10-14 13:02:15 2516 –sha-w- c:\docume~1\alluse~1\applic~1\KGyGaAvL.sys 2010-03-30 14:27:37 203776 –sh–w- c:\windows\system32\unrar.exe ============= FINISH: 16:59:09.34 ===============

Attachments:

  • [attachment removed: DDSattach.ZIP]
Post #20
Looks like the Rootkit is gone, lets try this

  • Now physically disconnect from the internet and STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields)
  • Click on your START button and choose Run. Then copy/paste the entire content of the following quotebox (Including the "" marks and the Symbols) into the run box.

    Go to [external image: Posted Image] -> Run -> copy/paste in the following single line command & click OK

    "%userprofile%\desktop\combofix.exe" /killall


    [external image: Posted Image]
  • Click OK and this will start ComboFix in a special way.
  • When finished, it will produce a log. Please save that log to a Notepad File to post in your next reply along with a fresh HJT log.

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

* After you have saved the logs, restart your system to re-enable all the programs that were disabled during the running of ComboFix.

* Reconnect to the internet

* Post the following logs/Reports:
  • ComboFix.txt
Post #21
ok i know this is probably getting fristrating, and i totaly appreceate your help. i did as instructed and again it hangs on stage 50 what im thinking is a bad sector on the hard drive, i noticed a tic tic tic when trying to access . so again no log file
Post #22
Not a problem, lets bypass Combofix for now and do this.

Please download Malwarebytes from Here or Here

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report please





ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.


  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [external image: Posted Image] icon on your desktop.
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option "Remove found threats" is Unchecked
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin
    scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as
    ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]
Please make sure you include the following items in your next post:
The log that was produced after running ESET Online Scanner.
Post #23
Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5363 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 12/22/2010 11:21:48 AM mbam-log-2010-12-22 (11-21-48).txt Scan type: Quick scan Objects scanned: 178216 Time elapsed: 15 minute(s), 49 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) _______________________________________________________

Attachments:

Post #24
Hey,


  • Please download OTM by OldTimer and save it to your desktop.
  • Double click the [external image: Posted Image] icon on your desktop.
  • Paste the following code under the [external image: Posted Image] area.
    Do not include the word "Code".

    :Processes
explorer.exe

:Services

:Reg

:Files
C:\registrybooster.exe
C:\1aaa\1lame\AudioConverter_Setup.exe
C:\Program Files\Search Settings



:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Push the large [external image: Posted Image] button.
  • OTM may ask to reboot the machine. Please do so if asked.
  • Copy/Paste the contents under the [external image: Posted Image] line here in your next reply.
  • If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.



How are things running now, any popups, redirects ?
Post #26
All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\registrybooster.exe moved successfully. C:\1aaa\1lame\AudioConverter_Setup.exe moved successfully. C:\Program Files\Search Settings\temp folder moved successfully. C:\Program Files\Search Settings\res folder moved successfully. C:\Program Files\Search Settings folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 2836 bytes User: Administrator.WW-DA5C87462BD ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 41620 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 41620 bytes User: LocalService ->Temp folder emptied: 2053848 bytes ->Temporary Internet Files folder emptied: 8716422 bytes ->Java cache emptied: 3280632 bytes ->Flash cache emptied: 45942 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Java cache emptied: 4440 bytes ->Flash cache emptied: 10571 bytes User: Pat ->Temp folder emptied: 19600812 bytes ->Temporary Internet Files folder emptied: 45511735 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 63179251 bytes ->Flash cache emptied: 6462790 bytes User: yfl %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 1225527 bytes %systemroot%\System32 .tmp files removed: 2952721 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 708 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 64289524 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 1051490160 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 1,210.00 mb OTM by OldTimer - Version 3.1.17.2 log created on 12222010_170325 Files moved on Reboot… File move failed. C:\WINDOWS\temp\hlktmp scheduled to be moved on reboot. Registry entries deleted on Reboot…
Post #28 last edited
my computer seems faster now. again no popups or redirects thank you i will test my design software and let you know

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI